PROGRESS: the sectoral approach to cyber resilience

The article, “PROGRESS: the sectoral approach to cyber resilience” has been published in the International Journal of Information Security in November 2024. This open access paper by Lior Tabansky and Eynan Lichterman, delves into the theoretical framework of the sectoral approach.

Each critical infrastructure and vital service represents a unique instance of a complex socio-technical–economic system. Resilience in complex systems is an emergent behaviour that occurs from interactions between components and is not easily predictable from understanding each component in isolation. Yet, cybersecurity practice and maturity models still focus on the robustness of separate components: organizational units, firms, or IT applications. Such a fundamental mismatch between theory and tools is among the causes of pervasive cyber insecurity. We introduce the sectoral capability maturity model to enable a comprehensive improvement of systemic resilience. The Promoting Global Cyber Resilience for Sectors Cyber-Capability Maturity Model incorporates the science of complex systems, cybersecurity frameworks, and two decades of CIP operations experience.