CYBERSECURITY RISK MANAGEMENT IN THE DIGITAL ERA: THE STRATEGIC VALUE OF ETHICAL HACKING

Abstract

Purpose: This study examines the application of ethical hacking in enhancing cybersecurity risk management in the information age. This research aims to evaluate the level of awareness about cybersecurity, use of ethical hacking, its effectiveness in terms of security improvement and issues faced. Design/Methodology/Approach: The current research employed a quantitative approach, primary data was collected via a questionnaire from 320 professionals from various industries. Convenience sampling was applied and the data was analysed statistically in terms of frequencies and percentages. The measurement tool has been proven to be reliable through Cronbach's Alpha (α = 0.86). Findings: The results of the study reveal employees are highly aware (78.1%) of cybersecurity, but the use of sophisticated cybersecurity technologies such as ethical hacking is average (59.4%). The research also reveals that the majority (75%) see the value of ethical hacking in enhancing security. The study reveals that the primary barriers to adopting ethical hacking include cost (37.5%) and a lack of expertise (28.1%) followed by management and regulatory barriers. Research Implications: The study shows a cybersecurity knowledge and practice gap. It implies that companies need to take an active approach, such as ethical hacking, to improve cybersecurity and deal with the new cybersecurity risk factors. Practical Implications: Organisations should increase their cybersecurity investments, training and use ethical hacking in risk management. Improving management support and leveraging the latest technologies can improve the effectiveness of ethical hacking. Originality/Value: This research contributes to the body of knowledge on using ethical hacking as a cybersecurity risk management strategy by providing empirical evidence on the application, benefits and challenges of ethical hacking in the digital era.

Keywords : Cybersecurity Risk Management, Ethical Hacking, Penetration Testing, Cyber Threats, Information Security, Risk Management, Digital Security