Future developments in standardisation of cyber risk in the Internet of Things (IoT)

Abstract

In this research article, we explore the use of a design process for adapting existing cyber risk assessment standards to allow the calculation of economic impact from IoT cyber risk. The paper presents a new model that includes a design process with new risk assessment vectors, specific for IoT cyber risk. To design new risk assessment vectors for IoT, the study applied a range of methodologies, including literature review, empirical study and comparative study, followed by theoretical analysis and grounded theory. An epistemological framework emerges from applying the constructivist grounded theory methodology to draw on knowledge from existing cyber risk frameworks, models and methodologies. This framework presents the current gaps in cyber risk standards and policies, and defines the design principles of future cyber risk impact assessment. The core contribution of the article therefore, being the presentation of a new model for impact assessment of IoT cyber risk.

References in corpus (5)

• Security Risk Assessment in Internet of Things Systems
• Future developments in cyber risk assessment for the internet of things
• Economic impact of IoT cyber risk -- Analysing past and present to predict the future developments in IoT risk analysis and IoT cyber insurance
• If you can't understand it, you can't properly assess it! The reality of assessing security risks in Internet of Things systems
• Sonification in security operations centres: what do security practitioners think?

Cited by in corpus (4)

• Artificial intelligence in cyber physical systems
• Design of a dynamic and self adapting system, supported with artificial intelligence, machine learning and real time intelligence for predictive cyber risk analytics in extreme environments, cyber risk in the colonisation of Mars
• Epistemological Equation for Analysing Uncontrollable States in Complex Systems: Quantifying Cyber Risks from the Internet of Things
• Dynamic real-time risk analytics of uncontrollable states in complex internet of things systems, cyber risk at the edge