TIM-8715 v2

Hubbard, D. W., Seiersen, R., Geer, D. E., & McClure, S. (2016). How to measure anything in cybersecurity risk. Wiley.

Read Chapter 3. Model Now!: An Introduction to Practical Quantitative Methods for Cybersecurity
This chapter explores the quantitative methods used in risk assessment.

Read Chapter 10. Toward Security Metrics Maturity
This chapter explores different operational security metrics maturity models.

Read Chapter 12. A Call to Action: How to Roll Out Cybersecurity Risk Management
This chapter discusses cybersecurity as an operational function that should be redefined around quantitative risk management strategically implemented by the organization.

NU Dissertation Center. (n.d.) Problem statement overview. National University.
This resource provides information on how problem statements are developed to specify and describe a problem.

Parmar, M., & Miles, A. (2024). Cyber security frameworks (CSFs): An assessment between the NIST CSF v2. 0 and EU standards. 2024 Security for Space Systems (3S), 1–7.
This paper assesses the NIST CSF v2.0 and the EU's NIS2 Directive to compare their suitability and identify gaps for holistic cybersecurity coverage in the defense sector.

Stoltz, M. (2024). The road to compliance: Executive federal agencies and the NIST risk management framework (No. arXiv:2405.07094). ArXiv.
This report analyzes how executive federal agencies implement the NIST Risk Management Framework (RMF) to achieve cybersecurity compliance, highlighting successes, challenges, and the role of continuous monitoring and automation.

Wu, F.-T., Lee, W.-B., Ku, C. C.-Y., Wu, Y.-S., & Shih, C.-Y. (n.d.). Integrating ISO 27001, NIST csf 2.0, and cyber defense matrix for enhancing organizational cybersecurity governance. Nist Csf, 2.
This preprint proposes an integrated framework that leverages ISO/IEC 27001, NIST CSF 2.0, and the Cyber Defense Matrix to provide a lifecycle risk management approach for enhancing organizational resilience against cyber threats.

SANS Institute. (2025). Information security policy templates. SANS Institute.
This continuously updated resource from the SANS Institute provides a comprehensive collection of downloadable security policy templates that serve as a practical starting point for practitioners developing cybersecurity governance documents.

Omer Eltayeb, O. E. (2024). The crucial significance of cyber threat intelligence in mitigating cyber attacks. Pakistan Journal of Life & Social Sciences, 22(2), 1760–1772.
This article emphasizes that Cyber Threat Intelligence (CTI) is essential in the contemporary cybersecurity landscape, serving as a critical tool for understanding, anticipating, and mitigating cyberattacks against digital systems.

Zhan, Y., Ahmad, S. F., Irshad, M., Al-Razgan, M., Awwad, E. M., Ali, Y. A., & Ahmad Ayassrah, A. Y. A. B. (2024). Investigating the role of Cybersecurity’s perceived threats in the adoption of health information systems. Heliyon, 10(1).
This study investigates how various perceived cybersecurity threats, including external attacks (like phishing and ransomware) and technological factors (such as system complexity and vulnerability), act as barriers to the adoption of health information systems.