Bilgin Metin

Bogazici University, Management Information Systems, Faculty Member

Followers

Following

Co-authors

Public Views

Bilgin Metin is a Professor in the Management Information Systems Department at Boğaziçi University, where he has also been serving as Department Head since 2022. His research focuses on Cybersecurity, IT/AI/Privacy Governance, IT Risk Management, Human Factors in Information Security, and Information Communication Technology design. Professor Metin is an influential scholar with over 130 publications and holds an h-index of 26 in Google Scholar.

He serves as an Associate Editor for the Journal of Cyber Security Technology (Taylor & Francis) and he is on the editorial boards of several prestigious journals, such as Information Security Journal: A Global Perspective (Taylor & Francis), EDPACS (EDP Audit, Control, and Security Newsletter) (Taylor & Francis), and International Journal of Information Security and Privacy (IGI Global), Organizational Cybersecurity Journal: Practice, Process, and People (Emerald).Complementing his academic work, Professor Metin holds distinguished industry certifications, including Offensive Security Certified Professional (OSCP), Certified Information Systems Auditor (CISA), Certified Data Privacy Solutions Engineer (CDPSE), and ISO 27001 Lead Auditor, which underscore his hands-on technical expertise.Since 2021, Prof. Bilgin Metin has been listed among the World's Top 2% Scientists by Stanford University and Elsevier.He is the founding director of the Boğaziçi University MIS Cybersecurity Center (since 2017)

less

InterestsView All (12)

Uploads

Papers by Bilgin Metin

Digitalisation and Cybersecurity: Towards an Operational Framework

Electronics, 2024

As businesses increasingly adopt digital processes and solutions to enhance efficiency and produc... more As businesses increasingly adopt digital processes and solutions to enhance efficiency and productivity, they face heightened cybersecurity threats. Through a systematic literature review and concept development, this article examines the intersection of digitalisation and cybersecurity. It identifies the methodologies and tools used for cybersecurity assessments, factors influencing the adoption of cybersecurity measures, and the critical success factors for implementing these measures. The article also puts forward the concept of cybersecurity governance process categories, which are used to classify the factors uncovered in the research. Findings suggest that current information security standards tend to be too broad and not adequately tailored to the specific needs of small and medium-sized enterprises (SMEs) when implementing emerging technologies, like Internet of Things (IoT), blockchain, and artificial intelligence (AI). Additionally, these standards often employ a top-down approach, which makes it challenging for SMEs to effectively implement them, as they require more scalable solutions tailored to their specific risks and limited resources. The study thus proposes a new framework based on the Plan-Do-Check model, built around the cybersecurity governance process categories and the three core pillars of governance, culture and standards. This is essentially a bottom-up approach that complements current top-down methods, and will be of value to both information technology (IT) professionals as an operational guide, and to researchers as a basis for future research in this field.

Bilgin Metin

Uploads

Papers by Bilgin Metin

Log In