<abstract xmlns="http://www.w3.org/1999/xhtml">

<p>In current socio-economic processes, info-communication services play a determining role, modifying the activities of certain actors. The growing dependence that has developed over the past two decades has imposed the need to give political will to security, which has led to an iterative evolution of the regulatory environment. Therefore, the regulatory framework requires certain entities to develop safeguards including controls that enhance both prevention and response in a manner commensurate with the business value of the information to be protected. However, due to the nature of cybersecurity, developing such countermeasures is not the task of a standalone organization but all entities in cyberspace in a wide range, from individuals to the public sector. Therefore, each entity involved must design protection capabilities in a manner commensurate with the risk, which requires strategic tools and methods and drives organizations to learn from their security incidents. Following our previous paper “Business strategy analysis of cybersecurity incidents” (Bederna et al.) on the topic, this paper reviews the essential formal security strategy formulation tools applied in the cases of Yahoo! and Estonia. Both are based on publicly available information. The analysis confirms the importance of managements’ or the government’s attitude and support for solving cybersecurity challenges.</p>
</abstract>

In current socio-economic processes, info-communication services play a determining role, modifying the activities of certain actors. The growing dependence that has developed over the past two decades has imposed the need to give political will to security, which has led to an iterative evolution of the regulatory environment. Therefore, the regulatory framework requires certain entities to develop safeguards including controls that enhance both prevention and response in a manner commensurate with the business value of the information to be protected. However, due to the nature of cybersecurity, developing such countermeasures is not the task of a standalone organization but all entities in cyberspace in a wide range, from individuals to the public sector. Therefore, each entity involved must design protection capabilities in a manner commensurate with the risk, which requires strategic tools and methods and drives organizations to learn from their security incidents. Following our previous paper “Business strategy analysis of cybersecurity incidents” (Bederna et al.) on the topic, this paper reviews the essential formal security strategy formulation tools applied in the cases of Yahoo! and Estonia. Both are based on publicly available information. The analysis confirms the importance of managements’ or the government’s attitude and support for solving cybersecurity challenges.

Further Strategy Analysis of Cybersecurity Incidents

Land Forces Academy Review

This work is licensed under the Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License.

{"article-title":"Further Strategy Analysis of Cybersecurity Incidents"}

In current socio-economic processes, info-communication services play a determining role, modifying the activities of certain actors. The growing dependence...

Further Strategy Analysis of Cybersecurity Incidents

Online veröffentlicht: 27. Sept. 2021

Seitenbereich: 251 - 260

DOI: https://doi.org/10.2478/raft-2021-0032

Schlüsselwörter
cybersecurity, cybersecurity capabilities, cybersecurity strategy

© 2021 Zsolt Bederna et al., published by Sciendo

This work is licensed under the Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License.

Further Strategy Analysis of Cybersecurity Incidents

Online veröffentlicht: 27. Sept. 2021

Seitenbereich: 251 - 260

DOI: https://doi.org/10.2478/raft-2021-0032

Schlüsselwörtercybersecurity, cybersecurity capabilities, cybersecurity strategy

© 2021 Zsolt Bederna et al., published by Sciendo

This work is licensed under the Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License.

Schlüsselwörter
cybersecurity, cybersecurity capabilities, cybersecurity strategy