Raising Cybersecurity Awareness and improving Organizational Resilience in the Critical Infrastructure Sector
Pina Taylor, Leila (2023)
2023
All rights reserved. This publication is copyrighted. You may download, display and print it for Your own personal use. Commercial use is prohibited.
Julkaisun pysyvä osoite on
https://urn.fi/URN:NBN:fi:amk-2023122038822
https://urn.fi/URN:NBN:fi:amk-2023122038822
Tiivistelmä
This thesis collects information on ways that organizations can raise cybersecurity awareness and improve organizational resilience in the critical infrastructure sector. The thesis was commissioned by the DYNAMO project. A consortium of 15 qualified business and applied research partners. Due to the rise in cyber threats, the complexity of critical infrastructure sectors such as energy, health and transport has increased. The DYNAMO project works towards developing a platform that will improve resilience of businesses and help avoid systemic collapse caused by cyberattacks.
The goal of this thesis is to find out how to raise cybersecurity awareness and improve organizational resilience in the critical infrastructure sector. The research question is: How do organizations raise cybersecurity awareness and improve resilience in an organization? This thesis presents the results and addresses the research question in the final 2 chapters.
The knowledge base of this thesis describes the key terms of cybersecurity, critical infrastructure sectors, and organizational resilience. The knowledge base provides context to the research that will be conducted. A literature review was chosen as the method for this thesis, to address the research question and accomplish the overarching goal of the study. After determining the inclusion and exclusion criteria and undergoing a thorough research process, a selection of 14 publications went through a content analysis. This gathered common patterns, themes, and meanings within the publications.
The key results of the literature review show that there are a variety of publications that outline ways organizations can raise cybersecurity awareness. The same applies to improving organizational resilience. Results also showed the human factor as being a contributor to both cybersecurity and resilience in organizations. However, there was a lack of research that discussed cybersecurity awareness and organizational resilience in the context of critical infrastructure sectors. Given the existing research gap, further research is needed to explore and develop strategies for improving cybersecurity awareness and organizational resilience in the context of critical infrastructure sectors.
The goal of this thesis is to find out how to raise cybersecurity awareness and improve organizational resilience in the critical infrastructure sector. The research question is: How do organizations raise cybersecurity awareness and improve resilience in an organization? This thesis presents the results and addresses the research question in the final 2 chapters.
The knowledge base of this thesis describes the key terms of cybersecurity, critical infrastructure sectors, and organizational resilience. The knowledge base provides context to the research that will be conducted. A literature review was chosen as the method for this thesis, to address the research question and accomplish the overarching goal of the study. After determining the inclusion and exclusion criteria and undergoing a thorough research process, a selection of 14 publications went through a content analysis. This gathered common patterns, themes, and meanings within the publications.
The key results of the literature review show that there are a variety of publications that outline ways organizations can raise cybersecurity awareness. The same applies to improving organizational resilience. Results also showed the human factor as being a contributor to both cybersecurity and resilience in organizations. However, there was a lack of research that discussed cybersecurity awareness and organizational resilience in the context of critical infrastructure sectors. Given the existing research gap, further research is needed to explore and develop strategies for improving cybersecurity awareness and organizational resilience in the context of critical infrastructure sectors.