TIM-8365

Loiseau, H., Ventre, D. & Aden, H.. (2020, November). Cybersecurity in humanities and social Science: A research methods approach, Volume 1. Wiley-ISTE.
Chapter 3: Cybersecurity and Data Protection – Research Strategies and Limitations in a Legal and Public Policy perspective.
This chapter analyzes potential methodological approaches to the study of this complex relationship between data protection and cybersecurity from a transdisciplinary legal and public policy perspective.

Salvaggio, S. A., & González, N. (2022). The European framework for cybersecurity: strong assets, intricate history. International Cybersecurity Law Review: Zeitschrift Für Cybersicherheit Und Recht, 1–10. https://doi.org/10.1365/s43439-022-00072-9
The European Union (EU) has consistently shown a desire to advance a universally accessible, open, safe, and stable cyberspace throughout the past ten years. The recommendations from the relevant EU institutions (Parliament, Commission, Council) have been consistent over time, reiterating the same fundamental issues that appear to not yet have been resolved after a decade of discussions and expert advice. This article discusses the challenges faced by foreign governments in crafting, implementing, and maintaining policies that lead to a higher standard of operations, education, programming, design, and production.

Muniz, J., Lakhani, A., Santos, O., & Frost, M. (2021, April). The modern security operations center. Addison-Wesley Professional.
Recommended Reading - Chapter 5: Centralizing data.
This chapter details many angles regarding collecting and converting data into actionable intelligence. Specifically, the centralizing of security data from a variety of sources is emphasized.

Girling, P. X. (2022, February). Operational risk management (2nd ed.). Wiley.
Recommended Reading - Chapter 7 Internal Operational Risk Event Loss Data.
This chapter explores the collection of operational risk event loss data. It explores the reasons for data collection and the methods used. The seven Basel operational risk categories and the Basel business line categories are described, and their use in the framework is discussed. Operational risk event data standards are introduced, along with examples of regulatory expectations and best practices for the many elements of an operational risk event data collection process.

Recommended Reading - Chapter 8 External Loss Data.
In this chapter, the focus is on the use of external loss data in the operational risk framework. In addition to the events that have occurred within a firm, the operational risk department will look at those that have occurred outside the firm. These events can offer valuable insight into the operational risks faced at the firm and may also provide input into any operational risk capital calculation.

Recommended Reading - Chapter 17: Best Practices In Risk-Related Management Activities.
This chapter focuses on the many activities within a fintech or bank that manage a specific operational risk or subset of operational risks. In addition to meeting all operational risk regulatory and business requirements, details for how these risk areas often have their unique regulations and business drivers are provided.