Digitalisation and Cybersecurity: Towards an Operational Framework

Metin, Bilgin, Özhan, Fatma Gül and Wynn, Martin G ORCID: 0000-0001-7619-6079 (2024) Digitalisation and Cybersecurity: Towards an Operational Framework. Electronics, 13 (4226). pp. 1-35. doi:10.3390/electronics13214226

Preview

Text 14494 Metin, B. et al (2024) Digitalisation and Cybersecurity Towards an Operational Framework.pdf - Published Version Available under License Creative Commons Attribution 4.0. Download (2MB) | Preview

Abstract

As businesses increasingly adopt digital processes and solutions to enhance efficiency and productivity, they face heightened cybersecurity threats. Through a systematic literature review and concept development, this article examines the intersection of digitalisation and cybersecurity. It identifies the methodologies and tools used for cybersecurity assessments, factors influencing the adoption of cybersecurity measures, and the critical success factors for implementing these measures. The article also puts forward the concept of cybersecurity governance process categories, which are used to classify the factors uncovered in the research. Findings suggest that current information security standards tend to be too broad and not adequately tailored to the specific needs of small and medium-sized enterprises (SMEs) when implementing emerging technologies, like Internet of Things (IoT), blockchain, and artificial intelligence (AI). Additionally, these standards often employ a top-down approach, which makes it challenging for SMEs to effectively implement them, as they require more scalable solutions tailored to their specific risks and limited resources. The study thus proposes a new framework based on the Plan-Do-Check model, built around the cybersecurity governance process categories and the three core pillars of governance, culture and standards. This is essentially a bottom-up approach that complements current top-down methods, and will be of value to both information technology (IT) professionals as an operational guide, and to researchers as a basis for future research in this field.

Item Type:	Article
Article Type:	Article
Uncontrolled Keywords:	Cybersecurity; Digitalisation; Digital transformation; Critical success factors; Cybersecurity adoption factors; Cybersecurity governance processes; Cybersecurity risk assessment; Operational framework
Subjects:	T Technology > T Technology (General)
Divisions:	Schools and Research Institutes > School of Business, Computing and Social Sciences
Depositing User:	Martin Wynn
Date Deposited:	05 Nov 2024 15:35
Last Modified:	05 Nov 2024 15:45
URI:	https://eprints.glos.ac.uk/id/eprint/14494

University Staff: Request a correction | Repository Editors: Update this record