Towards the Definition of a Dynamic and Systemic Assessment for Cybersecurity Risks

Stefano Armenia, Eduardo Ferreira Franco, Fabio Nonino, Emanuele Spagnoli and Carlo M. Medaglia

Systems Research and Behavioral Science, 2019, vol. 36, issue 4, 404-423

Abstract: Nowadays, our society is increasingly becoming economically and socially dependent on the cyberspace. However, the cyberspace is exposed to numerous risks, and there is a constant threat of exploitable vulnerabilities, which could cause significant reputational and economic damages. For addressing these threats, the Italian National Cyber Security Framework was developed to offer an approach to assessing cyber risks into organizations, as well as to help improve the related security through focused investments. Still, this evaluation is not a straightforward endeavour. Using the principles of the Systems Thinking paradigm, this work puts into causal relationships the self‐assessment risk‐categories by associating them to the various aspects of an organization structure used as a case study (composed of business areas and process). Finally, it presents a systemic causal‐effect relationship map capable of evidencing how a change in one or more categories could impact other security‐related elements of the company. © 2018 John Wiley & Sons, Ltd.

Date: 2019
References: Add references at CitEc
Citations:

Downloads: (external link)
https://doi.org/10.1002/sres.2556

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:bla:srbeha:v:36:y:2019:i:4:p:404-423

Ordering information: This journal article can be ordered from
http://www.blackwell ... bs.asp?ref=1092-7026

Access Statistics for this article

More articles in Systems Research and Behavioral Science from Wiley Blackwell
Bibliographic data for series maintained by Wiley Content Delivery ().