New Contributions in Information Systems and Technologies

Abstract

The series "Advances in Intelligent Systems and Computing" contains publications on theory, applications, and design methods of Intelligent Systems and Intelligent Computing. Virtually all disciplines such as engineering, natural sciences, computer and information science, ICT, economics, business, e-commerce, environment, healthcare, life science are covered. The list of topics spans all the areas of modern intelligent systems and computing.The publications within "Advances in Intelligent Systems and Computing" are primarily textbooks and proceedings of important conferences, symposia and congresses. They cover significant recent developments in the field, both of a foundational and applicable character. An important characteristic feature of the series is the short publication time and world-wide distribution. This permits a rapid and broad dissemination of research results. Advisory BoardChairman Nikhil R. Pal,

Systematic Approach to Cyber Resilience Operationalization in SMEs

“…However, there are clear differences between the cybersecurity and cyber resilience concepts. The main differences include [21]:…”

“…Figure 1) in its policies or if it does not. This category puts special interest in whether the document considers policies for when there is an incident because it would indicate notions of a "safe-to-fail" approach instead of the traditional "fail-safe" approach [21]. In this sense, the document is assigned a "yes" in Table II if it considers policies or actions for when there is an incident or a "no" when there is none.…”

“…This statement is backed up in the literature since many frameworks include the analysis of external risks [25], [31], [39]. The external risks are important to consider in order to implement cyber resilience since viewing the organization as one part of a network of organizations is a key difference between cyber resilience and traditional cybersecurity [21]. Risk management directly affects the anticipation and detection stages of the cyber resilience lifecycle since it is in the risk management where the company gets information on the risks they might face [43], [49].…”

“…This approach is commonly defined as the ability to anticipate, detect, withstand, recover, and evolve from cyber incidents, from an organizational, technological, and human point of view [20]- [23]. Cyber resilience's main purpose, opposite to traditional views of cybersecurity, is to prepare the company to be a "safe-to-fail" system in order to maintain business continuity despite any type of adverse situations, including unexpected and unknown ones [19]- [21], [24]. However, cyber resilience is not easy to operationalize, because it is a multi-dimensional concept that involves governance, awareness and training, and business continuity management [20], [25], [26] among other dimensions for which SMEs usually do not have assigned resources [14], [17].…”

Impact of Saudi Digital Library (SDL) to Saudi Research Output: A Review

“…In a physical library, for instance, users are compelled to search through catalogs on their desired research book or journal, a situation that compounds the search regarding time. In light of this, the Saudi Digital Library lacks the prerequisite navigation tools in modern day websites that link users to different sites (Rocha et al, 2015) [10]. Additionally, the Saudi Digital Library does not address the disability concept that helps in easy access by the disabled population.…”