TIM-8390: Strategic Management of Cybersecurity: General and Technology

Bederna, Z., Rajnai, Z., & Szadeczky, T. (2021). Further Strategy Analysis of Cybersecurity Incidents. Revista Academiei Fortelor Terestre, 26(3), 251–260. https://doi.org/10.2478/raft-2021-0032

Burton, S. L. (2021). Cybersecurity leaders: Knowledge driving human capital development. Buletin Stiintific, 2, 109–120. https://doi.org/10.2478/bsaft-2021-0013
This journal article describes how leaders need to use critical thinking to understand the 'what,' 'how,' and 'why' reasons and key drivers for organizational behaviors. A call for future research into augmented reality (AR) and utilizing the three-dimensional modeling of computer-generated components to increase leadership knowledge, skills, and abilities to successfully guide organizations through the pitfalls of cyberattacks is made.

Doran, M. (2020). Cyber resilience: A blueprint for success in the global digital era. ISSA Journal, 18(4), 24–34.
This journal article describes cyber resilience, its importance from an entrepreneurial and organizational perspective, and its significance for cybersecurity strategy advancement. A five-pillared framework for cyber resilience development is explored.

Vuggumudi, S., & Yong Wang. (2020). Sophisticated tools alone cannot prevent advanced persistent threats: What’s next? ISSA Journal, 18(6), 33–39.
This journal article introduces different groups of cybersecurity tools, discusses challenges with them, identifies the possible reasons why they are not enough to defend against advanced persistent threats, and discusses the research in progress to complement existing cybersecurity tools.

Calder, A. (2020, December). The cyber security handbook - prepare for, respond to, and recover from cyberattacks. ITGP.
This book is a comprehensive cyber security implementation manual that gives practical guidance on the individual activities identified in the IT Governance Cyber Resilience Framework (CRF) that can help organizations become cyber resilient and combat the cyber threat landscape.

Cunningham, P., & Head, S. (2021, July 1). Cybersecurity readiness as a business value. The RMA Journal, 103(10), 12.
This paper explains that cybersecurity activities should be prioritized in the same manner as other organizational activities as they relate to business impact. The authors emphasize that a successful framework must incorporate cybersecurity as part of the organization's goals. It should also promote the inclusion of corporate business strategies as part of cybersecurity risk management and decisions.

Cybersecurity & Infrastructure Security Agency (CISA). (n.d.). Free cybersecurity services and tools. CISA.
This list of cybersecurity tools is compiled by the Cybersecurity & Infrastructure Security Agency to support organizations in their advancement of security capabilities.

Petruzzi, J., & Loyear, R. (2016). Improving organisational resilience through enterprise security risk management. Journal of Business Continuity & Emergency Planning, 10(1), 44–56.
This paper explores the basics of the ESRM philosophy and life cycle and also shows how embracing the ESRM philosophy and implementing a risk-based security management model in the business organization can lead to higher levels of organizational resilience as desired by organization leaders, executives, and the board of directors.

Rapid7.com. (n.d.). Security orchestration and automation (SOAR) playbook.
This online text serves as a practical guide to security teams to improve their security posture efficiently. Use cases and examples are provided.