Supply Chain Cybersecurity: Direct and Indirect Cyber Risks

Tadeusz Sawik

Chapter Chapter 9 in Stochastic Programming in Supply Chain Risk Management, 2024, pp 293-322 from Springer

Abstract: Abstract In this chapter, a stochastic MIP (mixed integer programming) model is presented for optimization of cybersecurity investment and selection of security controls to mitigate the impact of direct and indirect (propagated) cyber risks in a supply chain. Using a recursive network transformation to compute the reduced vulnerabilities of secured supply chain nodes and the first-order Taylor series approximation of natural logarithm to linearize the nonlinear constraints, a nonlinear stochastic combinatorial optimization model is approximated by its linear equivalent. The problem objective is to determine an optimal cybersecurity investment under limited budget and portfolio of security controls for each node to balance the cybersecurity across the entire supply chain. The minmax objective functions are applied to minimize either the maximum breach probability or the maximum loss of supply chain nodes. Alternatively, maxmin objectives are used to maximize the minimum non-breach probability or the minimum savings of loss. The proposed solution approach is illustrated with results of computational study, and a comparison of approximated and exact solution values is presented. The decision-making insights are provided at the end of this chapter.

Keywords: Supply chain cybersecurity; Propagated cyber risks; Balancing of cybersecurity; Minmax vs. maxmin objectives; First-order Taylor approximation; Cybersecurity investment; Portfolio of security controls (search for similar items in EconPapers)
Date: 2024
References: Add references at CitEc
Citations:

There are no downloads for this item, see the EconPapers FAQ for hints about obtaining it.

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:spr:isochp:978-3-031-57927-1_9

Ordering information: This item can be ordered from
http://www.springer.com/9783031579271

DOI: 10.1007/978-3-031-57927-1_9

Access Statistics for this chapter

More chapters in International Series in Operations Research & Management Science from Springer
Bibliographic data for series maintained by Sonal Shukla () and Springer Nature Abstracting and Indexing ().