Autori: Armenia S, Ferreira Franco E, Nonino F, Spagnoli E, Medaglia C M
Editore: John Wiley & Sons
Tipologia Prodotto: Articolo in rivista
DOI: https://doi.org/10.1002/sres.2556
Titolo della Rivista: SYSTEMS RESEARCH AND BEHAVIORAL SCIENCE
Numero; Volume: 36; 4
Numero prima e ultima pagina: 404 – 423
Codice ISSN: 1099-1743
Anno di Pubblicazione: 2018
Link: https://onlinelibrary.wiley.com/doi/full/10.1002/sres.2556
Abstract:
Nowadays, our society is increasingly becoming economically and socially dependent on the cyberspace. However, the cyberspace is exposed to numerous risks, and there is a constant threat of exploitable vulnerabilities, which could cause significant reputational and economic damages. For addressing these threats, the Italian National Cyber Security Framework was developed to offer an approach to assessing cyber risks into organizations, as well as to help improve the related security through focused investments. Still, this evaluation is not a straightforward endeavour. Using the principles of the Systems Thinking paradigm, this work puts into causal relationships the self‐assessment risk‐categories by associating them to the various aspects of an organization structure used as a case study (composed of business areas and process). Finally, it presents a systemic causal‐effect relationship map capable of evidencing how a change in one or more categories could impact other security‐related elements of the company.
Keywords: National Cyber Security Framework; cyber‐security risks; system thinking