Cyber risk management for data-driven enterprises
Διαχείριση κινδύνων κυβερνοασφάλειας για δεδομενοκεντρικούς οργανισμούς
Master Thesis
Συγγραφέας
Beka, Miranda Maria
Μπέκα, Μιράντα Μαρία
Ημερομηνία
2021-09Επιβλέπων
Γκρίτζαλης, ΣτέφανοςGritzalis, Stefanos
Προβολή/ Άνοιγμα
Λέξεις κλειδιά
Cybersecurity ; Risk management ; Cyber risk ; Black swans ; Zero-day attacks ; Cybersecurity posture ; Cyber insurance ; Awareness ; Threat intelligence ; Critical infrastructure ; Resilience ; Risk analysis ; FINSEC ; Security analytics ; Cyber asset ; Cyber threat ; RiskΠερίληψη
The purpose of this thesis is to present and analyze the aspects of risk management concerning the field of cybersecurity and highlight its impact on building resilient business and providing secure services.
In this context, the first chapters aim to clarify basic definitions, required to comprehend the concepts of risk and risk management, in depth. An entire chapter is also dedicated to cybersecurity, including definitions of cyber assets, threats and threat actors, all essential components of cyber risk management, as well as the most common applicable frameworks and standards.
The results of two recent surveys complement the theoretical approach with actual data. The first, regards the latest trends in cyber threat intelligence, while the latter concerns cyber risks and maturity assessments per business sector and per security domain.
The “black swan” phenomenon is also presented as a major concern to be taken into consideration, especially in the era of the unpredicted, if the latest couple of years affected by the pandemic could be characterized as such.
Critical infrastructures constitute the next and final section of the study, with a special reference to the Financial sector, drawing upon an ongoing H2020 project, EU regulations and proposed best practices regarding their protection.