Cyber Resilience Strategic Planning and Self-assessment Tool for Operationalization in SMEs - Information Technology in Disaster Risk Reduction Access content directly
Conference Papers Year : 2021

Cyber Resilience Strategic Planning and Self-assessment Tool for Operationalization in SMEs

Abstract

With the current high risks of cyber incidents either caused by malicious cyber criminals or by accidents, there is a latent need for cyber resilience. This discipline is a broader than the traditional cybersecurity concept as it aims to give companies an adaptability such that they are “safe-to-fail”, i.e. that companies are capable of facing cyber incidents and still continue their operations or recover quickly. Although cyber resilience is a desirable capability in companies it is not easy to operationalize because it requires knowledge, experience, strategic planning and decision-making capabilities. These characteristics are not easily found in companies starting their cyber resilience building process such as SMEs. Moreover, the current literature offers documents to aid in the operationalization of cyber resilience by giving companies several actions or policies that build cyber resilience, but the information on how to strategize an effective cyber resilience building process is often scarce. Therefore, this article proposes a strategic planning and self-assessment tool to aid companies in the strategic planning of cyber resilience building. This tool contains the most important cyber resilience policies for SMEs and natural progressions for them obtained from the experience of 11 experts. With these progressions companies can obtain insights on what is their current state in each policy and what actions they can perform in order to improve that state. Thus, the tool can be helpful to develop effective action plans for cyber resilience building.
Fichier principal
Vignette du fichier
498235_1_En_21_Chapter.pdf (721.47 Ko) Télécharger le fichier
Origin : Files produced by the author(s)

Dates and versions

hal-03761636 , version 1 (26-08-2022)

Licence

Attribution

Identifiers

Cite

Juan Francisco Carias, Saioa Arrizabalaga, Josune Hernantes. Cyber Resilience Strategic Planning and Self-assessment Tool for Operationalization in SMEs. 5th International Conference on Information Technology in Disaster Risk Reduction (ITDRR), Dec 2020, Sofia, Bulgaria. pp.259-273, ⟨10.1007/978-3-030-81469-4_21⟩. ⟨hal-03761636⟩
26 View
8 Download

Altmetric

Share

Gmail Facebook X LinkedIn More