Cyber risk management: History and future research directions

Martin Eling, Michael McShane and Trung Nguyen

Risk Management and Insurance Review, 2021, vol. 24, issue 1, 93-125

Abstract: Cybersecurity research started in the late 1960s and has continuously evolved under different names such as computer security and information security. This article briefly covers that history but will especially focus on the latest incarnation known as “cyber risk management,” which includes both technical and economic/management dimensions. The main focus of the article is to review research on individual steps of the cyber risk management process and on the overall process to highlight gaps and determine research directions. Two main findings are that cyber risk is difficult to include in the overall enterprise risk management process and that a move toward cyber resilience is necessary to deal with such a complex risk. Both findings require a level of interdisciplinary collaboration that is currently lacking.

Date: 2021
References: View references in EconPapers View complete reference list from CitEc
Citations: View citations in EconPapers (10)

Downloads: (external link)
https://doi.org/10.1111/rmir.12169

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:bla:rmgtin:v:24:y:2021:i:1:p:93-125

Access Statistics for this article

Risk Management and Insurance Review is currently edited by Mary A. Weiss

More articles in Risk Management and Insurance Review from American Risk and Insurance Association
Bibliographic data for series maintained by Wiley Content Delivery ().