In response to organizations’ increasing vulnerability to data breaches, we present an integrated risk model for data breach management based on a systematic review of the literature. Theoretically, the study extends the body of knowledge on data breach management by identifying and updating conceptualizations of data breach risks (items) and resolutions (actions) and by providing a foundation for organizational responses to emerging data breach incidents (heuristics). Practically, the study provides key insights that practitioners can use to organize and orchestrate effective data breach management based on comprehensive profiles of risk items and resolution techniques.

为了应对组织对数据泄露的日益增加的脆弱性，我们基于对文献的系统回顾，提出了数据泄露管理的集成风险模型。从理论上讲，该研究通过识别和更新数据泄露风险（项目）和解决方案（行动）的概念化，并为组织对新出现的数据泄露事件的响应（启发式）提供基础，扩展了数据泄露管理的知识体系。实际上，该研究提供了重要的见解，从业者可以根据风险项目和解决方案的综合概况来组织和协调有效的数据泄露管理。