TIM-8715 v1

Makaryan, A. S., & Putyato, M. M. (2021). Conceptual approach to the implementation of the proactive defense subsystem of the operational cybersecurity center. 2021 XXIV International Conference on Soft Computing and Measurements (SCM), Soft Computing and Measurements (SCM),2021 XXIV International Conference On, 186–189.
This paper describes the analysis and modeling of the proactive defense subsystem of the operational cybersecurity center. The proposed approach is dictated not only by an increase in the functionality of modern technologies but also by the requirements for the creation of integrated solutions that are scalable within the architecture to protect against various types of threats.

Dalal, R. S., Howard, D. J., Bennett, R. J., Posey, C., Zaccaro, S. J., & Brummel, B. J. (2022). Organizational science and cybersecurity: Abundant opportunities for research at the interface. Journal of Business & Psychology, 37(1), 1–29.
This journal article describes the need to integrate organizational science into cybersecurity research to develop requirements for the organization. Integrating the "human factor" into cybersecurity research is needed to understand the key cybersecurity constructs relevant to employee behavior, illuminate the unique opportunities available to organizational scientists in the cybersecurity arena, and provide overall conceptual frameworks of the antecedents of employees' cybersecurity behavior.

Hamdani, S. W. A., Abbas, H., Janjua, A. R., Shahid, W. B., Amjad, M. F., Malik, J., Murtaza, M. H., Atiquzzaman, M., & Khan, A. W. (2021). Cybersecurity standards in the context of operating system : Practical aspects, analysis, and comparisons. ACM Computing Surveys (CSUR), 54(3), 1–36.
This article presents a detailed literature review, a comprehensive analysis of various cybersecurity standards (FIPS, ISO, NIST), and statistics of cyber-attacks related to operating systems (OS). In addition to that, an explicit comparison between the frameworks, tools, and software available for OS compliance testing is provided. An in-depth analysis of the most common software solutions ensuring compliance with certain cybersecurity standards is also presented.

Ranaweera, P., Jurcut, A., & Liyanage, M. (2021). MEC-enabled 5g use cases: A survey on security vulnerabilities and countermeasures. ACM Computing Surveys, 9, 1–37.
This journal article describes the future of mobile and internet technologies as manifesting advancements beyond the existing scope of science. The authors detail the security vulnerabilities through the study of key 5G-based use cases.

Dhirani, L. L., Armstrong, E., & Newe, T. (2021). Industrial IoT, cyber threats, and standards landscape: Evaluation and roadmap. Sensors (Basel, Switzerland), 21(11).
This journal article describes the need for research that enables an understanding of converged/hybrid cybersecurity standards, reviews the best practices, and provides a roadmap for identifying, aligning, mapping, converging, and implementing the right cybersecurity standards and strategies for securing M2M communications in the IIoT.

Center for Internet Security (CIS). (n.d.). CIS critical security controls version 8. CIS.
This valuable resource provided a logical mapping of controls to various industry standards and frameworks. CIS Critical Security Controls (CIS Controls) are a prioritized set of safeguards to mitigate the most prevalent cyber-attacks against systems and networks.

National Institute of Standards and Technology (NIST). (2021, January). NIST Releases Supplemental Materials for SP 800-53 and SP 800-53B: Control Catalog and Control Baselines in Spreadsheet Format.
This website provides links to the downloads for control baselines and control catalog spreadsheets.

Landoll, D. J. (2017). Information security policies, procedures, and standards: A practitioner's reference. Auerbach Publications.
This book provides a detailed view into effective information security policies and procedures using standards such as NIST 800-53, ISO 27001, and COBIT, and regulations such as HIPAA and PCI DSS as the foundation for the content. Highlighting key terminology, policy development concepts and methods, and suggested document structures, it includes examples, checklists, sample policies and procedures, guidelines, and a synopsis of the applicable standards.