The DOI matches its Crossref record.
A Framework for Dealing With Cybersecurity Risks as Part of Information Security
Abstract
In the current scenario, cybersecurity issues have emerged to be a major challenge for firms to deal with. The increased use of technologies has increased radically the volume and typology of information produced, exchanged, and managed by firms thus creating conditions for cybersecurity incidents or information breaches. In this situation, it becomes paramount for firms to recognize cybersecurity risks and be prepared to prevent them through the implementation of approaches and technologies able to ensure a high level of protection. In this chapter, we provide a framework for analyzing and managing cybersecurity risks. We employed a case study strategy to understand how the risk analysis process is carried out within an Information Security company. The study and observations obtained from this case study have permitted to define a framework useful for SME to deal with cybersecurity issues.
Overview
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
In the citing paper
“A 2024 European Commission recommendation urges member states to initiate synchronized migration efforts, warning that data requiring long-term confidentiality remains at risk of future quantum decryption, often termed the 'store-now, decrypt-later' threat [23,24].”
From Harvest-Now, Decrypt-Later: A Temporal Cybersecurity Risk in the Quantum Transition (2025) · cites this paper as [23]
In the citing paper
“The prevailing best practice emphasizes comprehensive cryptographic inventory, incremental algorithm updates, and synchronized migration aligned with national and international standards [23,25].”
From Harvest-Now, Decrypt-Later: A Temporal Cybersecurity Risk in the Quantum Transition (2025) · cites this paper as [23]
In the citing paper
“Forward-secrecy models [26] and archival-risk analyses [23] capture aspects of long-term exposure but lack explicit treatment of adversaries who harvest ciphertexts today and exploit future computational advances.”
From Harvest-Now, Decrypt-Later: A Temporal Cybersecurity Risk in the Quantum Transition (2025) · cites this paper as [23]
Citations
Cites
No references could be resolved yet.
Research works printed but not linked: 15
- Berg, 2007, Qualitative research methods for the social sciences
- Borky, 2019, Protecting information with cybersecurity, 345, 10.1007/978-3-319-95669-5_10 · DOI
- Creswell, 2007, Qualitative research designs: Selection and implementation, The Counseling Psychologist, 35, 236, 10.1177/0011000006287390 · DOI
- Gallotti, 2022, Sicurezza delle informazioni. Gestione del rischio; I sistema di gestione La ISO/IEC 27001:2022; I controlli della ISO/IEC 27002:2022
- ISO, 2014, ISO/IEC 27001. Information technology – Security techniques – Information security management system – Requirements
- ISO, 2018, ISO/IEC 27000. Information security – Security techniques – Information security management systems – Overview and vocabulary
- Kumar, 2022, Impact of cybersecurity on operations and supply chain management: Emerging trends and future research directions, Production and Operations Management, 31, 4488, 10.1111/poms.13859 · DOI
- Mabry, 2008, Case study in social research. In P. Alasuutari, L. Bickman, & J. Brannen (Eds.), 214, 10.4135/9781446212165.n13 · DOI
- Nambisan, 2019, The digital transformation of innovation and entrepreneurship: Progress, challenges and key themes, Research Policy, 48, 103773, 10.1016/j.respol.2019.03.018 · DOI · Paper page
- Ndou, 2022, Fundraising activities and digitalization: Defining risk indicators for evaluating equity crowdfunding campaigns, Meditari Accountancy Research, 30, 1169, 10.1108/MEDAR-03-2021-1237 · DOI
- NIST, 2018, Framework for improving critical infrastructure cybersecurity
- Turk, 2022, Cybersecurity assessment of BIM/CDE design environment using cyber assessment framework, Journal of Civil Engineering and Management, 28, 349, 10.3846/jcem.2022.16682 · DOI
- Villalón-Fonseca, 2022, The nature of security: A conceptual framework for integral-comprehensive modeling of IT security and cybersecurity
- Whitman, 2022, Principles of information security
- Yin, 2014, Case study research: Design and methods
Cited by
Sorted by citations
Harvest-Now, Decrypt-Later: A Temporal Cybersecurity Risk in the Quantum Transition
Kagai, F., Branch, P., But, J., & Allen, R. (2025) · Telecom · doi:10.3390/telecom6040100 · Cited by 15
Metadata
- Authors
- Spagnolo, M., Ndou, V., Giribaldi, D., & Arena, V.
- Affiliations
- University of Salento (IT)
- bSwiss Cyber Com SA, Switzerland
- cSMI Technologies and Consulting srl, Italy
- ORCID
- Ndou, Valentina
- Venue
- Digitalization, Sustainable Development, and Industry 5.0
- Publisher
- Emerald Publishing Limited
- Published
- 2023-11-20
- Pages
- 101-123
- OpenAlex
- W4387589854
- Cited by
- 2
- References
- 0
- Citations by year
- 2025: 2
- FWCI
- 1.33
- Type
- book chapter
- Language
- en
- Open access
- closed
- Locations
- Emerald Group Publishing Limited eBooks (publishedVersion)
- Topics
- Physical Sciences › Computer Science › Information Systems › Information and Cyber Security
- Social Sciences › Business, Management and Accounting › Management Information Systems › Information Technology Governance and Strategy
- Physical Sciences › Computer Science › Computer Networks and Communications › Cybersecurity and Information Systems
- Keywords
- cyber risk management, information security, risk analysis framework, cyber incidents, small and medium-sized enterprises, risk prevention
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
