TIM-8301 v5

Bederna, Z., Rajnai, Z., & Szadeczky, T. (2021). Business strategy analysis of cybersecurity incidents. Revista Academiei Fortelor Terestre, 26(2), 139–148. https://doi.org/10.2478/raft-2021-0020
This paper reviews essential formal security strategy formulation tools, applying them in the Facebook case based on publicly available information, to confirm the importance of management’s attitude and support for tackling cybersecurity challenges.

Fatima, F., Hyatt, J. C., Rehman, S. U., Cruz, E. D. L., Nadella, G. S., & Meduri, K. (2024). Resilience and risk management in cybersecurity: A grounded theory study of emotional, psychological, and organizational dynamics. Journal of Economy and Technology, 2(247–257), 247–257. https://doi.org/10.1016/j.ject.2024.08.004
This study examines the dynamics of cybersecurity professionals in financial organizations regarding stress management, risk handling, and communication challenges, highlighting the importance of support systems, risk assessments, and clear communication protocols.

Ibadah, N., Benavente-Peces, C., & Pahl, M.-O. (2024). Securing the future of railway systems: A comprehensive cybersecurity strategy for critical on-board and track-side infrastructure. Sensors, 24(24), 8218–8218. https://doi.org/10.3390/s24248218
The paper examines current cybersecurity measures, identifies key vulnerabilities, and proposes solutions for enhancing the security of railway infrastructures, including a layered security framework that incorporates continuous monitoring, risk-based cybersecurity modeling, and Artificial Intelligence-assisted threat detection.

Irmak, E., Kabalci, E., & Kabalci, Y. (2023). Digital transformation of microgrids: A review of design, operation, optimization, and cybersecurity. Energies, 16(12), 4590–4590. https://doi.org/10.3390/en16124590
This paper reviews the digitalization of microgrids, discussing digital technologies, cybersecurity, and the barriers and challenges regarding the digitalization of microgrids.

Kour, R., Karim, R., & Dersin, P. (2025). Modelling cybersecurity strategies with game theory and cyber kill chain. International Journal of System Assurance Engineering and Management, 1–12. https://doi.org/10.1007/s13198-025-02733-4
This study demonstrates the application of a strategic game model within the context of cybersecurity, specifically using the cyber kill chain model, to enhance understanding of the complex challenges and facilitate the development of effective cybersecurity solutions.

Olivares, R., Salinas, O., Ravelo, C., Soto, R., & Crawford, B. (2024). Enhancing the efficiency of a cybersecurity operations center using biomimetic algorithms empowered by deep Q-learning. Biomimetics (2313-7673), 9(6), 307. https://doi.org/10.3390/biomimetics9060307
This paper enhances cybersecurity strategies by integrating biomimetic optimization algorithms with the adaptability of Deep Q-Learning, targeting the efficient allocation and deployment of network intrusion detection sensors while balancing cost-effectiveness with essential network security imperatives.

SMAJIĆ, N. (2023). Human element in cybersecurity. Strategies for building a stronger and more secure workforce. International Journal of Information Security & Cybercrime, 12(1), 30–36. https://doi.org/10.19107/ijisc.2023.01.04
This article discusses the importance of the human element in cybersecurity, focusing on strategies for building a stronger and more secure workforce through training, continuous learning, and cybersecurity culture.

(2024, April 25). ISC2 Certified Information Systems Security Professional (CISSP) (2024) Cert Prep. LinkedIn Learning. https://www.linkedin.com/learning/isc2-certified-information-systems-security-professional-cissp-2024-cert-prep/earning-your-cissp?u=99504138

Diogenes, Y., & Ozkaya, E. (2018). Cybersecurity - Attack and Defense Strategies. Packt Publishing.

Baldassarre, M. T., Barletta, V. S., Caivano, D., & Scalera, M. (2020). Integrating security and privacy in software development. Software Quality Journal, 28(3), 987–1018.
The authors proposed a Privacy Oriented Software Development (POSD) approach to complement traditional development processes by integrating security and privacy management in software systems.

Booth, J., Chehadi, A., Friel, A., Hogan, M., Wukitsch, M., Souppaya, M., & Johnson, N. (2024). Secure software development practices for generative AI and dual-use foundation models an SSDF comm (NIST SP 800-218A). National Institute of Standards and Technology.
Introduced NIST SP 800-218A as an augmentation to the Secure Software Development Framework (SSDF) version 1.1, providing secure development practices specific to generative AI and dual-use foundation models.

Khan, R. A., Khan, S. U., Alzahrani, M., & Ilyas, M. (2022). Security assurance model of software development for global software development vendors. IEEE Access, 10, 58458–58487.
Reviewed widely used security software models and proposed a new Security Assurance Model (SAM) adaptable to contemporary scenarios, emphasizing global software development (GSD) vendor companies.

Khan, R. A., Khan, S. U., Alzahrani, M., & Ilyas, M. (2022). Security Assurance Model of Software Development for Global Software Development Vendors. IEEE Access, 10, 58458–58487. https://doi.org/10.1109/access.2022.3178301
This article examines how security is addressed and responded to throughout the software development process.

Siavvas, M., Manganopoulou, E., Manolis, G., & Kehagias, D. (2023). Security monitoring during software development: An industrial case study. Applied Sciences, 13(12), 6872.
The authors demonstrated an integrated security platform, VM4SEC, utilizing static and textual source code analysis for security monitoring and optimization, tailored through an industrial case study to meet a company's specific security needs.

Souppaya, M., Scarfone, K., & Dodson, D. (2022). Secure Software Development Framework (SSDF) Version 1.1: (Draft). NIST Special Publication 800-218, 1(1). https://doi.org/10.6028/nist.sp.800-218
The authors presented version 1.1 of the Secure Software Development Framework (SSDF), offering recommendations for mitigating the risk of software vulnerabilities.

Valdés-Rodríguez, V. H., Pérez-García, J. A., Rodríguez-Reséndiz, J., Herrera-Navarro, J. J., & Hochstetter, J. (2023). Towards the integration of security practices in agile software development: A systematic mapping review. Applied Sciences, 13(8), 4578.
Conducted a systematic mapping review to identify methods or models for integrating security practices into agile software development across different SDLC phases.

(2024, April 25). ISC2 Certified Information Systems Security Professional (CISSP) (2024) Cert Prep. LinkedIn Learning. https://www.linkedin.com/learning/isc2-certified-information-systems-security-professional-cissp-2024-cert-prep/earning-your-cissp?u=99504138

Olmsted, A. (2024). Security-Driven Software Development. Packt Publishing.

Kohnfelder, L. (2021). Designing Secure Software. No Starch Press.