Cyber security incidents are now prevalent in many organisations. Arguably, those who can
learn from security incidents and address the underlying causes will reduce the prevalence …

Incident handling strategy is one key strategy to mitigate risks to the confidentiality, integrity
and availability (CIA) of organisation assets, as well as minimising loss (eg financial …

The Internet and information technology have influenced human life significantly. However,
information security is still an important concern for both users and organizations …

Organized, sophisticated and persistent cyber-threat-actors pose a significant challenge to
large, high-value organizations. They are capable of disrupting and destroying cyber …

Year in and year out the increasing adaptivity of offenders has maintained ransomware's
position as a major cybersecurity threat. The cybersecurity industry has responded with a …

Digital assets of organizations are under constant threat from a wide assortment of nefarious
actors. When threats materialize, the consequences can be significant. Most large …

This contribution presents a model for cyber-resilience of critical cyber infrastructures (CCI)
based on the implementation of a digital twin. It addresses the risks associated with the …

In the aftermath of cybersecurity incidents within organizations, explanations of their causes
often revolve around isolated technical or human events such as an Advanced Persistent …

Abstract Information security risk management (ISRM) is the primary means by which
organizations preserve the confidentiality, integrity and availability of information resources …

IS literature has identified various economic, performance, and environmental factors
affecting cybersecurity investment decisions. However, economic modeling approaches …