Secure by Design: Cybersecurity Extensions to Project Management Maturity Models for Critical Infrastructure Projects

Payette, Jay; Anegbe, Esther; Caceres, Erika; Muegge, Steven

doi:10.22215/timreview904

Cited by 7 publications

(11 citation statements)

References 5 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…However, these models are also in need of improvement with emerging threats to the systems such as cybersecurity. 75 Maturity models may enable continual improvement of existing capabilities by mapping maturity level characteristics, for example, for flood resilience. 76 There is a need to assess how these tools may contribute to the evaluation of the existence and maturity of these capabilities of an organization.…”

Section: Resultsmentioning

confidence: 99%

Survey assessment of organizational resiliency potential of a group of Seveso organizations in Turkey

Şengül

Marşan

Gün

2018

Proceedings of the Institution of Mechanical Engineers, Part O:

View full text Add to dashboard Cite

Organizational resilience is vital for long-term value creation in organizations, as they continuously face many obstacles due to fast evolving, complex, and uncertain environments. Resilience is also important for managing hazmat and oil spill risks, given the expected increase in frequency and magnitude of natural disasters due to climatic extremes. Organizations with higher resiliency potential are more likely to manage these challenges effectively. Recently developing literature indicates that development of dynamic capabilities, which are different from ordinary capabilities, leads to greater organizational resiliency potential. This study assesses organizational resiliency potential of a group of Seveso organizations in Turkey via a 5-point Likert-type-scale survey designed toward measuring four important dimensions of dynamic capabilities including anticipation capabilities, adaptive culture, networking capabilities, and organizational learning. Cluster analysis of survey results revealed that there are significant differences in organizational resiliency potential among organizations, as evidenced by the distance plot. While participating organizations have scored relatively high resiliency potentials, there are areas that need improvement including increasing anticipation and networking capabilities and strengthening employee engagement to further enhance resilience of organizations. In the second phase of the study, the effect of three factors on organizational resiliency potential that includes socioeconomic level and earthquake risk of the region that the organization is located, and Seveso Directive status of the organization were assessed. While organizational resiliency potential scores among groups of organizations that fall under different categories for these three factors did not show any statistically significant difference, follow-up focused interview revealed that respondents believed there may be differences in resiliency potential. Both survey and follow-up focused interview assessments showed the complexity and multiple aspects involved in developing adequate organizational resiliency potential. Organizational resiliency potential research is still in its infancy and both theoretical and technical sides of the equation requires further development.

show abstract

Section: Resultsmentioning

confidence: 99%

Survey assessment of organizational resiliency potential of a group of Seveso organizations in Turkey

Şengül

Marşan

Gün

2018

Proceedings of the Institution of Mechanical Engineers, Part O:

View full text Add to dashboard Cite

show abstract

“…Industry-, firm-, technology management-and technology maturity-specific factors influencing the trade-off were identified [44]. A framework to prioritize cybersecurity at the beginning of projects was established [45]. We are unaware of logistics-specific research of this trade-off.…”

Section: Background and Research Propositionsmentioning

confidence: 99%

Cyber Security vs. Digital Innovation: A Trade-off for Logistics Companies?

Heierhoff¹,

Hoffmann²

2022

Proceedings of the Annual Hawaii International Conference on System Sciences

View full text Add to dashboard Cite

Digital innovations are essential for companies in the 21 st century. However, due to their reliance on (new) technologies, they are associated with cybersecurity risks. As the reduction of these can negatively affect an organization's innovation capability, a trade-off might result. This trade-off has, to our knowledge, not yet been sufficiently researched. Our paper contributes to closing this research gap using semi-structured interviews with 14 digital innovation and cybersecurity experts in the German logistics industry. Findings from these interviews suggest that there are different types of tensions between digital innovation and cybersecurity capabilities detrimentally influencing innovations in three ways: by slowing down (temporally), requiring more resources (economically), or restricting innovative freedom (functionally). Furthermore, we were able to identify triggering and resolving factors. Thereby, our paper offers valuable contributions from both a theoretical as well as practical perspective.

show abstract

“…Development of security and resilience is seen as a maturity process in [41], referencing the CERT Resilience Management Model (CERT RMM) from the Carnegie Mellon Software Engineering Institute. Resilience as a strategy is not simple to implement, in [42], the analysis of resilience strategies in the US agencies revealed that most of the plans only focus on a few of the stages of resilience.…”

Section: Key Issues In Governance-responsibilities Management and Comentioning

confidence: 99%

Risks, Safety and Security in the Ecosystem of Smart Cities

Johnsen¹

2018

Risk Assessment

View full text Add to dashboard Cite

We have performed a review of systemic risks in smart cities dependent on intelligent and partly autonomous transport systems. Smart cities include concepts such as smart transportation/use of autonomous transportation systems (i.e., autonomous cars, subways, shipping, drones) and improved management of infrastructure (power and water supply). At the same time, this requires safe and resilient infrastructures and need for global collaboration. One challenge is some sort of risk based regulation of emergent vulnerabilities. In this paper we focus on emergent vulnerabilities and discussion of how mitigation can be organized and structured based on emergent and known scenarios cross boundaries. We regard a smart city as a software ecosystem (SEC), defined as a dynamic evolution of systems on top of a common technological platform offering a set of software solutions and services. Software ecosystems are increasingly being used to support critical tasks and operations. As a part of our work we have performed a systematic literature review of safety, security and resilience software ecosystems, in the period 2007-2016. The perspective of software ecosystems has helped to identify and specify patterns of safety, security and resilience on a relevant abstraction level. Significant vulnerabilities and poor awareness of safety, security and resilience has been identified. Key actors that should increase their attention are vendors, regulators, insurance companies and the research community. There is a need to improve private-public partnership and to improve the learning loops between computer emergency teams, security information providers (SIP), regulators and vendors. There is a need to focus more on safety, security and resilience and to establish regulations of responsibilities on the vendors for liabilities.

show abstract

Secure by Design: Cybersecurity Extensions to Project Management Maturity Models for Critical Infrastructure Projects

Cited by 7 publications

References 5 publications

Survey assessment of organizational resiliency potential of a group of Seveso organizations in Turkey

Survey assessment of organizational resiliency potential of a group of Seveso organizations in Turkey

Cyber Security vs. Digital Innovation: A Trade-off for Logistics Companies?

Risks, Safety and Security in the Ecosystem of Smart Cities

Contact Info

Product

Resources

About