TIM-7031

Dixit, A., Quaglietta, J., Nathan, K., Dias, L., & Nguyen, D. (2023). Cybersecurity: Guiding principles and risk management advice for healthcare boards, senior leaders and risk managers. Healthcare Quarterly (Toronto, Ont.), 25(4), 35–40. https://doi.org/10.12927/hcq.2023.27019
The paper provides practical guidance for boards, senior leaders, and risk managers in the development and implementation of cybersecurity measures.

Osmei, T., & Ali, M. (2023). Hands-on Cyber Risk Management Scepticism. In Proceedings of the 2023 International Conference on Computing, Electronics & Communications Engineering (iCCECE) (pp. 89–94). Computing, Electronics & Communications Engineering (iCCECE).
https://doi.org/10.1109/iCCECE59400.2023.10238544
This paper presents the challenges that need to be undertaken when analyzing risk from an organizational point of view.

Thomas, P., Bratvold, R. B., & Bickel, E. (2014). The risk of using risk matrices. SPE Economics & Management, 6(02), 56–66. DOI:10.2118/166269-MS
This paper shows how matrixes can be used to communicate risk.

Romanosky, S., & Petrun Sayers, E. L. (2024). Enterprise risk management: How do firms integrate cyber risk? Management Research Review, 47(1), 1–17. https://doi.org/10.1108/MRR-10-2021-0774
This paper examines how companies integrate cyber risk into their enterprise risk practices.

Cerin, B. (2020). Cyber security risk is a board-level issue. 2020 43rd International Convention on Information, Communication and Electronic Technology (MIPRO), Information, Communication and Electronic Technology (MIPRO), 2020 43rd International Convention On, 384–388. https://doi.org/10.23919/MIPRO48935.2020.9245151
The paper discusses the challenges in communicating cyber risks to the board of directors.

Safitri, E. H. N., & Kabetta, H. (2023). Cyber-Risk Management Planning Using NIST CSF V1.1, ISO/IEC 27005:2018, and NIST SP 800-53 Revision 5 (A Study Case to ABC Organization). 2023 IEEE International Conference on Cryptography, Informatics, and Cybersecurity (ICoCICs), Cryptography, Informatics, and Cybersecurity (ICoCICs), 2023 IEEE International Conference On, 332–338. https://doi.org/10.1109/ICoCICs58778.2023.10277652
The paper addressed risk assessment by comparing and using the NIST CSF.

Brumfield, C., & Haugli, B. (n.d.). Cybersecurity risk management. O’Reilly. Retrieved February 29, 2024, from https://learning.oreilly.com/library/view/cybersecurity-risk-management/9781119816287/