TIM-8715 v1

Sun, Z., Zhang, J., Yang, H., & Li, J. (2020). Research on the Effectiveness Analysis of Information Security Controls. 2020 IEEE 4th Information Technology, Networking, Electronic and Automation Control Conference (ITNEC), Automation Control Conference (ITNEC), 2020 IEEE 4th Information Technology, Networking, Electronic And, 1, 894–897.
This journal article explores the complexity and ever-changing information security issues. The authors propose an information security controls effectiveness analysis model, combining the measurement indicators and their measurement results for compliance and effectiveness analysis, guiding how to correct and improve information security control objectives and techniques, to promote continuous improvement of the information security management system.

Ganin, A. A., Quach, P., Panwar, M., Collier, Z. A., Keisler, J. M., Marchese, D., & Linkov, I. (2020). Multicriteria decision framework for cybersecurity risk assessment and management. Risk Analysis : An Official Publication of the Society for Risk Analysis, 40(1), 183–199.
The proposed model framework bridges the gap between risk assessment and risk management, allowing an analyst to ensure a structured and transparent process of selecting risk management alternatives. The use of this technique is illustrated for a hypothetical, but realistic, case study exemplifying the process of evaluating and ranking five cybersecurity enhancement strategies.

Krutilla, K., Alexeev, A., Jardine, E., & Good, D. (2021). The benefits and costs of cybersecurity risk reduction: a dynamic extension of the gordon and loeb model. Risk Analysis : An Official Publication of the Society for Risk Analysis, 41(10), 1795–1808.
This article develops a dynamic extension of the classic model of cybersecurity investment formulated by Gordon and Loeb. In this dynamic model, results are influenced by the rate at which cybersecurity assets depreciate and the rate of return on investment.

Matheu, S. N., Hernández-Ramos, J. L., Skarmeta, A. F., & Baldini, G. (2020). A survey of cybersecurity certification for the internet of things. ACM Computing Surveys (CSUR) - Invited Tutorial and Regular Papers, 53(6), 1–36.
This survey is intended to give a comprehensive overview of cybersecurity certification to facilitate the definition of a framework that fits in emerging scenarios, such as the IoT paradigm.

Nazir, H. M. J., & Han, W. (2022). Proliferation of cyber situational awareness: Today’s truly pervasive drive of cybersecurity. Security & Communication Networks, 1–16.
This study introduces cyber situation awareness (CSA), its origin, conception, aim, and characteristics based on an analysis of function shortages and development requirements. Furthermore, we discussed the CSA research framework and examined the research history, which is the essential aspect, and assessed the present issues of the research as well.

Popkova, E. G., Alekseev, A. N., Lobova, S. V., & Sergi, B. S. (2020). The theory of innovation and innovative development. AI scenarios in Russia. Technology in Society, 63.
This article explores different scenarios of implementing artificial intelligence (AI) in Russia. AI can accelerate the innovative development of Russia's Economy, but it entails the risks of its destabilization and therefore requires further research. Specifically, this article contributes to the theory of innovation, thereby specifying the logic of the optimization of innovative development and the optimal scale in a strategy of risk management.