INFORMATION SECURITY: TEN YEARS OF CYBERSECURITY GOVERNANCE, RISK AND COMPLIANCE – A BIBLIOMETRIC EXAMINATION OF RESEARCH THEMES

Abstract

The escalating frequency and sophistication of cyber threats over the past decade have fundamentally transformed how organizations approach information security governance, risk management, and regulatory compliance. This study presents a comprehensive bibliometric analysis of cybersecurity Governance, Risk, and Compliance (GRC) research published between 2015 and 2024, examining 429 peer-reviewed documents indexed in the Scopus database. Employing bibliometric techniques including keyword frequency analysis, co-occurrence network mapping, thematic mapping, and thematic evolution, the study identifies dominant research themes, emerging trends, and the intellectual structure of the field. Key findings reveal three primary thematic clusters: (i) governance frameworks and regulatory compliance, (ii) cyber risk management and strategic integration, and (iii) technological innovation including artificial intelligence and blockchain applications in cybersecurity. The analysis further demonstrates a significant shift from purely technical approaches toward integrated socio-technical and strategic management perspectives. Publication trends show exponential growth since 2015, with major contributions emanating from the United States, Europe, and increasingly Asia. The findings underscore the growing recognition of cybersecurity as a fundamental business risk rather than a purely technical concern, highlighting the need for adaptive, interdisciplinary governance frameworks capable of addressing evolving digital threats. This study contributes to both academic understanding and practical application by mapping the research landscape and identifying critical gaps requiring future investigation, particularly in real-time risk mitigation, human-centric security models, and sustainable cybersecurity strategies.