<abstract xmlns="http://www.w3.org/1999/xhtml">

<p>In the current social and economic processes, information and communication services play a decisive role, changing several entities’ operations. The growing dependence that has developed over the last two decades made the security needs introduced political will, which has resulted in an iterative evolution of the regulatory environment. Hence, the legal framework requires that several entities develop protection that includes controls enhancing both preventive and reactive in a risk-proportionate manner under the business value to be protected. Nevertheless, due to the nature of cybersecurity, the development of such capabilities is not the task of a single organisation but all entities involved in cyberspace, including, e.g., individuals, non-profit and for-profit organisations, public sector actors. Therefore, each involved entity should design protection capabilities in a risk-proportionate manner, which requires strategic approaches and tools and requires organisations to learn from security incidents. This paper reviews the essential formal security strategy formulation tools, applying in the Facebook’s case based on publicly available information. The analysis aims to confirm the importance of management’s attitude and support for tackling cybersecurity’s challenges.</p>
</abstract>

In the current social and economic processes, information and communication services play a decisive role, changing several entities’ operations. The growing dependence that has developed over the last two decades made the security needs introduced political will, which has resulted in an iterative evolution of the regulatory environment. Hence, the legal framework requires that several entities develop protection that includes controls enhancing both preventive and reactive in a risk-proportionate manner under the business value to be protected. Nevertheless, due to the nature of cybersecurity, the development of such capabilities is not the task of a single organisation but all entities involved in cyberspace, including, e.g., individuals, non-profit and for-profit organisations, public sector actors. Therefore, each involved entity should design protection capabilities in a risk-proportionate manner, which requires strategic approaches and tools and requires organisations to learn from security incidents. This paper reviews the essential formal security strategy formulation tools, applying in the Facebook’s case based on publicly available information. The analysis aims to confirm the importance of management’s attitude and support for tackling cybersecurity’s challenges.

Business Strategy analysis of Cybersecurity Incidents

Land Forces Academy Review

This work is licensed under the Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License.

{"article-title":"Business Strategy analysis of Cybersecurity Incidents"}

In the current social and economic processes, information and communication services play a decisive role, changing several entities’ operations. The growing...

Business Strategy analysis of Cybersecurity Incidents

Publicado en línea: 28 jun 2021

Páginas: 139 - 148

DOI: https://doi.org/10.2478/raft-2021-0020

Palabras clave
cybersecurity, cybersecurity capabilities, cybersecurity strategy

© 2021 Zsolt Bederna et al., published by Sciendo

This work is licensed under the Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License.

Business Strategy analysis of Cybersecurity Incidents

Publicado en línea: 28 jun 2021

Páginas: 139 - 148

DOI: https://doi.org/10.2478/raft-2021-0020

Palabras clavecybersecurity, cybersecurity capabilities, cybersecurity strategy

© 2021 Zsolt Bederna et al., published by Sciendo

This work is licensed under the Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License.

Palabras clave
cybersecurity, cybersecurity capabilities, cybersecurity strategy