This review explores the problems Chief Information Security Officers (CISOs) and other cyber professionals face when defending their organization against cyberattacks. Using a Cyber Defense Grid, which was developed based on military science and cybersecurity concepts and terminology, we coded 125 articles published in Information Systems (IS) journals. We also employed three avenues (i.e., lenses) from cybernetic theory to frame the coding results to derive cyber defense strategies. In particular, we propose three strategic cyber defense modes: reactive, heuristic, and proactive. Taken together, these three modes suggest ways in which organizations can react strategically within the whole cyber defense domain.

中文翻译：

---

整个网络防御：同步实践和理论


本综述探讨了首席信息安全官 （CISO） 和其他网络专业人员在保护其组织免受网络攻击时面临的问题。使用基于军事科学和网络安全概念和术语开发的 Cyber Defense Grid，我们编码了 125 篇发表在信息系统 （IS） 期刊上的文章。我们还采用了控制论理论的三种途径（即镜头）来构建编码结果以推导出网络防御策略。特别是，我们提出了三种战略网络防御模式：反应式、启发式和主动式。综上所述，这三种模式为组织在整个网络防御领域内做出战略反应提供了方法。