Despite the rapid escalation of cyber threats, there has still been little research into the foundations of the subject or
methodologies that could serve to guide Information Systems researchers and practitioners who deal with cyber security. In
addition, little is known about Crime-as-a-Service (CaaS), a criminal business model that underpins the cybercrime
underground.