A pathway model to five lines of accountability in cybersecurity governance

Slapničar, Sergeja; Axelsen, Micheal; Bongiovanni, Ivano; Stockdale, David

doi:10.1016/j.accinf.2023.100642

Cited by 7 publications

(5 citation statements)

References 39 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…To begin with, a cybersecurity resilience framework provides a structured approach to identifying, assessing, and mitigating potential cyber risks [12]. By comprehensively understanding the threat landscape, businesses can proactively implement security measures that not only address current vulnerabilities but also anticipate future challenges.…”

Section: Literature Review a Cyber Resilience For Business Continuitymentioning

confidence: 99%

“…Notably, the CSF's integration with Risk Management Framework (RMF) principles facilitates a risk-informed approach, enabling organizations to prioritize control implementation based on the potential impact and likelihood of identified threats [22]. However, the lack of prescriptive regulations and formal certification within the CSF can leave some organizations grappling with ambiguity and struggling to demonstrate compliance to external stakeholders [12].…”

Section: B Existing Cybersecurity Frameworkmentioning

confidence: 99%

“…Within this foundational stage, three pivotal indicators have been identified to guide and assess the establishment of an effective cyber resilience framework, as shown in Figure 1. Documented Cybersecurity Governance: Central to the cultivation of robust cyber resilience is the development and documentation of clear and comprehensive cybersecurity governance policies and procedures [12]. This first indicator emphasizes the imperative of crafting a structured framework that delineates the overarching principles, guidelines, and procedural protocols governing cybersecurity within the organizational context.…”

Section: A Governance and Leadershipmentioning

confidence: 99%

“…Defined Cybersecurity Leadership Roles: Building upon the establishment of governance policies, the second indicator underscores the importance of clearly defined roles and responsibilities for cybersecurity leadership. Cyber resilience requires a coordinated and efficient response to potential threats, and this necessitates a clear delineation of functions and accountabilities among individuals or teams responsible for cybersecurity [12].…”

Section: A Governance and Leadershipmentioning

confidence: 99%

“…This indicator emphasizes the importance of ensuring that cybersecurity policies are not only well-documented but also easily accessible to all members of the organization. Accessibility facilitates a collective understanding of the established guidelines, creating a shared responsibility for cybersecurity among employees [12].…”

Section: Security Policies and Proceduresmentioning

confidence: 99%

See 4 more Smart Citations

Cyber Resilience Framework: Strengthening Defenses and Enhancing Continuity in Business Security

AL-Hawamleh

2024

IJCDS

View full text Add to dashboard Cite

This study presents a comprehensive Cybersecurity Resilience Framework designed to fortify organizational defenses against the evolving landscape of cyber threats while enhancing business continuity. The aim is to provide businesses with a robust and adaptive strategy that extends beyond traditional cybersecurity paradigms. This study employs a methodology grounded in an extensive cybersecurity literature review to inform the conceptualization and iterative development of a resilient framework, integrating key elements from established sources and aligning with industry wisdom. By integrating governance and leadership principles, collaboration with external stakeholders, and continuous monitoring, the framework fosters a holistic approach to cyber resilience. Leveraging a behavioral perspective, the study explores human factors, user awareness, and decision-making processes, recognizing the critical role of organizational culture in fostering a cybersecurity-aware ethos. Findings reveal a roadmap that includes technology resilience, regular audits, and assessments, emphasizing evidence-based improvements. The framework addresses resource constraints, regulatory variability, and the dynamic threat landscape, promoting adaptability in the face of diverse organizational contexts. The significance of this study lies in its contribution to the ongoing evolution of cyber resilience strategies, offering organizations a practical guide to navigate the complexities of the digital realm. As businesses increasingly rely on interconnected technologies, this framework stands as a vital tool for enhancing security, safeguarding critical assets, and ensuring continuity in the face of an ever-changing cyber threat landscape.

show abstract

Section: Literature Review a Cyber Resilience For Business Continuitymentioning

confidence: 99%

Section: B Existing Cybersecurity Frameworkmentioning

confidence: 99%

Section: A Governance and Leadershipmentioning

confidence: 99%

Section: A Governance and Leadershipmentioning

confidence: 99%

Section: Security Policies and Proceduresmentioning

confidence: 99%

See 3 more Smart Citations