The DOI matches its Crossref record.
A unified cybersecurity framework for complex environments
Abstract
Information and Communication Technologies (ICTs) present a number of vulnerabilities, threats and risks that could lead to devastating cyber-attacks resulting into huge financial losses, legal implications, and reputational damage for large and small organizations. As such, in this digital transformation and 4th industrial revolution era, nations and organizations have accepted that cybersecurity must be part of their strategic objectives and priorities. However, cybersecurity in itself is a multifaceted problem to address and the voluntary "one-size-fits-all" cybersecurity approaches have proven not effective in dealing with cyber incidents, especially in complex operational environments (e.g. large technology-centric organizations) that are multi-disciplinary, multi-departmental, multi-role, multinational, and operating across different locations. Addressing modern cybersecurity challenges requires more than a technical solution. A contextual and systematic approach that considers the complexities of these large digital environments in order to achieve resilient, sustainable, cost-effective and proactive cybersecurity is desirable. This paper aims to highlight through a single case study approach the multifaceted nature and complexity of the cybersecurity environment, pertinently in multi-disciplinary organizations. Essentially, this paper contributes a unified cybersecurity framework underpinned by an integrated capability management (ICM) approach that addresses the multifaceted nature of cybersecurity as well as the challenges and requirements eminent in complex environments, such as national government, municipalities or large corporations. The unified framework incorporates realistic and practical guidelines to bridge the gap between cybersecurity capability requirements, governance instruments and cybersecurity capability specification, implementation, employment and sustainment drawing from well-tested military capability development approaches.
Overview
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
In the citing paper
“The complexity of cybersecurity stems not only from the diversity of attack methods but also from the intricate nature of network environments, which requires the integrated application of various tools and strategies to achieve effective protection (Azizi and Haass 2023; Mtsweni etal. 2018).”
From When LLMs meet cybersecurity: a systematic literature review (2025) · cites this paper as Mtsweni et al. 2018
Citations
Cites
No references could be resolved yet.
Research works printed but not linked: 25
- 10.23962/10539/23573 · DOI
- Fihlani P., 2017, Millions caught in South Africa's 'worst data breach' - BBC News, BBC News
- J. Mtsweni N. Shozi K. Matenche and M. Mutemwa "Development of a semantic-enabled cybersecurity threat intelligence sharing model " in 11th International Conference on Cyber Warfare & Security 2016 pp. 244--252. J. Mtsweni N. Shozi K. Matenche and M. Mutemwa "Development of a semantic-enabled cybersecurity threat intelligence sharing model " in 11th International Conference on Cyber Warfare & Security 2016 pp. 244--252.
- Shackelford S. J., 2015, Bottoms up: A Comparison of Voluntary Cybersecurity Frameworks, UC Davis Bus. Law J., 16
- Tisdale S., 2016, Architecting a cybersecurity management framework, Issues Inf. Syst., 17, 227
- 10.1016/S1353-4858(16)30076-9 · DOI
- 10.2147/MDER.S50048 · DOI
- 10.1016/j.cose.2011.12.010 · DOI
- 10.1016/j.cose.2013.04.004 · DOI · Paper page
- Wheeler E., 2011, Elsevier
- Mtsweni J., 2016, Development of a cyberthreat intelligence-sharing model from big data sources, J. Inf. Warf., 15, 56
- 10.1016/S1353-4858(16)30077-0 · DOI
- de Waal C., 2013, 10th SA INCOSE Conference 2013 Systems Engineering
- Yin R. K., 2009, SAGE Publications
- T. Peltier Information security risk analysis. 2010. T. Peltier Information security risk analysis. 2010. · DOI
- 10.1109/AMS.2008.145 · DOI
- Talib M., 2012, Guide to ISO 27001: UAE case study, Issues Informing Sci. Inf. Technol., 7, 331
- 10.22215/timreview/837 · DOI
- 10.1089/cyber.2014.1502 · DOI
- R. Oosthuizen and J. Roodt "Credible defence capability: command and control at the core " in Land Warfare Conference 2008. R. Oosthuizen and J. Roodt "Credible defence capability: command and control at the core " in Land Warfare Conference 2008.
- M. Thaba "Technology support for military capability based acquisition " in International Association for Management of Technology IAMOT 2017 Conference Proceedings 2017. M. Thaba "Technology support for military capability based acquisition " in International Association for Management of Technology IAMOT 2017 Conference Proceedings 2017.
- Smith C., 2012, Ind. Eng., 23
- Smith C. J., 2012, INCOSE 2012 and the 8th Biennial European Systems Engineering Conference 2012, 22, 1056
- P. C. Jacobs S. Von Solms and M. M. Grobler "Towards a national cybersecurity capability development model " in 16th European Conference on Cyber Warfare and Security (ECCWS) 2017. P. C. Jacobs S. Von Solms and M. M. Grobler "Towards a national cybersecurity capability development model " in 16th European Conference on Cyber Warfare and Security (ECCWS) 2017.
- Krutz R., 2010, Wiley Publishing.
Cited by
Sorted by citations
When LLMs meet cybersecurity: a systematic literature review
Zhang, J., Bu, H., Wen, H., Liu, Y., Fei, H., Xi, R., Li, L., Yang, Y., Zhu, H., & Meng, D. (2025) · Cybersecurity · doi:10.1186/s42400-025-00361-w · Cited by 383
“The complexity of cybersecurity stems not only from the diversity of attack methods but also from the intricate nature of network environments, which requires the integrated application of various tools and strategies to achieve effective protection (Azizi and Haass 2023; Mtsweni et al. 2018).”
Metadata
- Authors
- Mtsweni, J., Gcaza, N., & Thaba, M.
- Affiliations
- Council for Scientific and Industrial Research (ZA)
- Venue
- Proceedings of the Annual Conference of the South African Institute of Computer Scientists and Information Technologists
- Publisher
- ACM
- Published
- 2018-09-26
- Pages
- 1-9
- OpenAlex
- W2899542987
- Cited by
- 5
- References
- 0
- Citations by year
- 2025: 3 · 2023: 1 · 2020: 1
- FWCI
- 0.20
- Type
- conference paper
- Language
- en
- Open access
- closed
- Locations
- South African Institute of Computer Scientists and Information Technologists (publishedVersion)
- Topics
- Physical Sciences › Computer Science › Information Systems › Information and Cyber Security
- Social Sciences › Political Science and International Relations › Cybersecurity and Cyber Warfare Studies
- Social Sciences › Business, Management and Accounting › Management Information Systems › Information Technology Governance and Strategy
- Keywords
- cybersecurity framework, cybersecurity governance, military capability development, large organizations, cyber resilience
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
