Mapping the Landscape of Information Security Risk Management Research: A Bibliometric Analysis Using VOS Viewer and Power BI

Steady growth in cybersecurity/forensics publications over the decade.

Top contributors identified: key authors, institutions, countries leading the field.

Major topics include anomaly detection, malware analysis, cyberattacks, machine learning in security.

Collaboration networks show global research clusters (with certain countries forming hubs).

Points out underinvestigated areas at the intersection of cybersecurity and forensics.

Emphasizes need for future work linking preventative security and post-incident forensics.

Provides a decade-long baseline to guide future research directions in emerging cybersecurity threats.

Research splits into 4 clusters: (1) Industry 4.0 & smart factories, (2) Industry 4.0 & SMEs, (3) SMEs & cybersecurity practices, (4) SME digitalization & entrepreneurship.

Increasing digitalization - higher cyber risk for SMEs, but current

literature often treats these topics separately (tech adoption vs. security).

Few studies integrate business innovation and security preparedness, indicating a silo effect.

Identifies a gap: lack of integrated studies on SME digitalization and security.

Predicts cybersecurity in SMEs will emerge as its own research stream, distinct from general digitalization research. Recommends bridging the gap by focusing future research on security as an integral part of SME digital transformation strategies.

Machine learning & deep learning are the dominant approaches in cybersecurity, showing rapid growth in research interest.

USA is the top-producing country, with India, China and others also major contributors. Strong collaboration networks among leading countries (USA–China–Europe etc.).

High impact work from countries like Canada and Italy despite fewer papers (high citations per paper). Keywords show emphasis on network security, intrusion detection, IoT security, federated learning, etc., indicating trending research topics.

Calls for future research in federated learning and privacy-preserving AI to secure IoT/IoMT systems.

Notes the need to address emerging threats (e.g., adversarial attacks on AI) and to integrate AI with privacy/security by design.

Suggests strengthening international collaborations and interdisciplinary approaches (combining AI with domain knowledge) to tackle complex cyber threats.

Dramatic growth in cybersecurity publications over the period, reflecting rising importance of security R&D.

Shift in focus from basic IT security to advanced tech integration: recent literature heavily features AI, IoT, blockchain in cybersecurity context.

Global collaboration network is mapped: USA, China, India, Germany, UK are key hubs driving research and cooperating internationally.

Highlights the field’s increasingly interdisciplinary nature (technical, human, policy angles) to address complex cyber challenges.

Stresses the need for continuous innovation and broad collaboration to keep pace with evolving threats.

Recommends interdisciplinary approaches in future research – integrating fields (technical and human factors) and expanding analytical frameworks.

Suggests using more diverse data sources (beyond just one index, and including real-time threat data) in bibliometric analyses to fully capture the fast-changing cybersecurity landscape.

Steady long-term growth in cybercrime research output as cyber threats proliferate.

Top author: K. Jaishankar (21 papers) – a leading scholar in cyber criminology.

Leading journal: IEEE Access (151 papers on cybercrime); indicates a tech-oriented approach to cybercrime issues is common.

Most-cited work on Stuxnet (cyber warfare), showing crossover between cybercrime and national security topics. Major contributing institutions and countries identified (e.g., strong output from certain universities and cross-country collaborations visualized); reflects an international research effort against cybercrime.

Provides a baseline for future cybercrime research, helping identify less-explored topics.

Implies need for further study in emerging crime areas (e.g., AI-enabled crimes, crypto crimes) as well as underrepresented regions, though specific future directions are general.

Emphasizes using these findings to guide policy and research focus, given the dynamic nature of cybercrime (“moving target” requiring ongoing study).

Risk Management in the Artificial Intelligence Act

DOI: 10.1111/risa.17665

Summary: Analyzes Article 9 of the EU AI Act, focusing on its risk management provisions.

On the Inattention to Digital Confidentiality in Operations and Supply Chain Research

DOI: 10.1111/poms.12983

Summary: Discusses the lack of focus on digital confidentiality in operations and supply chain management literature.

A Survey of Cyber Security Management in Industrial Control Systems

DOI: 10.1016/j.ijcip.2015.02.002

Summary: Explores cybersecurity management practices in industrial control systems.

Cybersecurity Hazards and Financial System Vulnerability: A Synthesis of Literature

DOI: 10.1016/j.ijcip.2015.02.002

Summary: Reviews literature on cybersecurity risks affecting financial systems.

Benchmarking the Relationship Between Supply Chain Risk Mitigation Strategies and Practices: An Integrated Approach

DOI: 10.1108/BIJ-12-2019-0523

Summary: Proposes a framework linking risk mitigation strategies to practices in supply chains.

An ISM Modelling of Barriers for Blockchain/Distributed Ledger Technology Adoption in Supply Chains Towards Cybersecurity

DOI: 10.1145/3450588.3450600

Summary: Identifies barriers to adopting blockchain for cybersecurity in supply chains.

What Are the Trend and Core Knowledge of Information Security? A Citation and Co-Citation Analysis

DOI: 10.1016/j.im.2023.103774

Summary: Analyzes trends and core knowledge areas in information security research.

The ISO/IEC 27001 Information Security Management Standard: Literature Review and Theory-Based Research Agenda

DOI: 10.1108/TQM-09-2020-0202

Summary: Provides a literature review and research agenda for the ISO/IEC 27001 standard.

Information Security Risk Management: In Which Security Solutions Is It Worth Investing?

DOI: 10.28963/ais.2011.022

Summary: Evaluates the effectiveness of various security solutions in risk management.

Cyber-Related Risk Disclosure in Australia: Evidence from the ASX200

DOI: 10.3316/agispt.20200324027433

Summary: Investigates the disclosure of cyber-related risks among Australian companies.