Conceptual Design of a Cybersecurity Resilience Maturity Measurement (CRMM) Framework

Abstract

African countries are at high risk with respect to cybersecurity breaches and are experiencing substantial financial losses. Amongst the top cybersecurity frameworks, many focus on guidelines with respect to detection, protection and response, but few offer formal frameworks for measuring actual cybersecurity resilience. This article presents the conceptual design for a cybersecurity resilience maturity measurement (CRMM) framework to be applied in organisations, notably for critical information infrastructure (CII), as part of cyber risk management treatment.The African Journal of Information and Communication (AJIC) 2 Mbanaso, Abrahams and Apene

Methodologies, Requirements, and Challenges of Cybersecurity Frameworks: A Review

“…As a result, we examined how to handle cloud computing, cybersecurity, and data security risks utilizing ISO standards and procedures. These regulations should take into account security elements like identification, privacy, secrecy, integrity, durability, physical and cloud security [63].…”

“…A methodology for determining an organization's mental maturity must be created, and it must take cloud-specific security domains into account. Several studies of various types have been conducted on this subject [52] [63] [67] [68]. The authors of [67] recommend an ISMM for information security that has 23 evaluated areas and 5 levels (performed, managed, established, predictable, and optimized).…”

“…In order to examine an organization's dependency on ICT, Bahuguna et al [52] created five levels of maturity and related these to four more levels. Moreover, a Cybersecurity Resilience Maturity Measurement (CRMM) approach for evaluating cybersecurity resilience maturity has been developed [63]. They've divided the risk and resilience intersections into four stages (initializing, defining, managing, and optimizing).…”

A Comprehensive Study of the IoT Cybersecurity in Smart Cities

“…Based on the proposal by Mbanaso et al [106] that defines a set of steps to develop a conceptual design of a Cybersecurity Resilience Maturity Measurement (CRMM) Framework, and the proposal by Weeserik et al [107] which indicates a maturity model to improve risk management operationally, we have established the following five phases for developing an IoT Cybersecurity Maturity Model for a smart city: Phase 1: Research context Perform a review of literature and standards related to smart city, cybersecurity, resilience, and sustainability. Phase 2: Design the strategy framework Identify technologies or features related to cybersecurity, resilience, and sustainability.…”

“…In [106], an adaptation of the CMMI model is proposed considering resilience features; for this development, the following norms or cybersecurity standards are considered as input sources:…”