TIM-6755 V1

Scala, N. M., Reilly, A. C., Goethals, P. L., & Cukier, M. (2019). Risk and the five hard problems of cybersecurity. Risk Analysis: An International Journal, 39(10).
This article examines cyber defense and selects areas of opportunity to add risk analysis principles to the cybersecurity field. The Science of Security (SoS) initiative at the National Security Agency makes the case to promote interdisciplinary research through a framework of five core problem areas.

U.S. Department of Homeland Security. (2019, June). Cybersecurity capability maturity model (C2M2).
This guide is a valuable resource as a methodology for organizations to measure and improve their cybersecurity programs. Also, this guide provides the framework for developing a new cybersecurity program.

Ameen, N., Tarhini, A., Shah, M. H., Madichie, N., Paul, J., & Choudrie, J. (2021). Keeping customers’ data secure: A cross-cultural study of cybersecurity compliance among the Gen-Mobile workforce. Computers in Human Behavior, 114.
This study looks at the impact of human behavior on cybersecurity risk and compliance. The authors make the case based on the increasingly mobile workforce in the field and the known data breaches impacting customer data security.

Siegel, C. A., & Sweeney, M. (2020). Cyber strategy: Risk-driven security and resiliency. Auerbach Publications.
This e-book describes cybersecurity strategies using several industry-standard frameworks discussed in this class. Some of the topics detailed are cyber risks and controls, current and target statement assessments, and measuring cybersecurity plan performance. This e-book is a valuable tool to have as a reference and specific chapters are valuable resources for the weekly assignments.