A Conceptual Framework for Managing Cybersecurity Risks in Government Organizations

Abstract

There is no doubt that cybersecurity risk management in government organizations is one of the main concerns of the governments worldwide. There are several concerns cybersecurity risk management across different organizations sectors, sizes ,and resources. In order to tackle the problems of diverse cybersecurity risks and purposefully risk management, it could be useful to assess and manage the different organizations' risk of cybersecurity. To achieve this ultimate goal, the researcher propose a conceptual framework for managing cybersecurity risks in government organizations. This framework considers three main dimensions for calculating risk metrics of (Information Technology) IT-assets in government organizations, which are vulnerability assessment, risk level measurements, and scoring of organization's risk profile. This framework could be used by researchers to develop tools for cybersecurity risk management and to recommend better security controls for improving risk management on government organizations.