A4 Article in conference proceedings
Cyber security : Trust based architecture in the management of an organization‘s security (2020)

Pöyhönen, J., & Lehto, M. (2020). Cyber security : Trust based architecture in the management of an organization‘s security. In T. Eze, L. Speakman, & C. Onwubiko (Eds.), ECCWS 2020 : Proceedings of the 19th European Conference on Cyber Warfare and Security (pp. 304-313). Academic Conferences International. Proceedings of the European conference on information warfare and security. https://doi.org/10.34190/EWS.20.090

JYU authors or editors

Publication details

All authors or editors: Pöyhönen, Jouni; Lehto, Martti

Parent publication: ECCWS 2020 : Proceedings of the 19th European Conference on Cyber Warfare and Security

Parent publication editors: Eze, Thaddeus; Speakman, Lee; Onwubiko, Cyril

Conference:

Place and date of conference: University of Chester, UK (virtual conference), 25-26.6.2020

ISBN: 978-1-912764-61-7

eISBN: 978-1-912764-62-4

Journal or series: Proceedings of the European conference on information warfare and security

ISSN: 2048-8602

eISSN: 2048-8610

Publication year: 2020

Pages range: 304-313

Publisher: Academic Conferences International

Publication country: United Kingdom

Publication language: English

DOI: https://doi.org/10.34190/EWS.20.090

Publication open access: Not open

Publication channel open access: 

Abstract

The functioning of a modern society is based on the cooperation of several organisation, whose joint efficiency depends increasingly on trustable business processes. Trust is based on availability, reliability and integrity of ICT system data in the operating environment, whose cyber security risks are continuously augmented by threatening scenarios of the digital world. Information and Communications Technology (ICT) can be seen a critical asset of organization. To prevent loss of customers the trust and that way revenue and money, as well as to protect organisational reputation, this asset must be protected from cyberattacks. Trust in cyber environment is critical factor for organization in order to contentiously run the business processes that the customers can count on. This article emphasizes the system view, the trust and the trust-based architecture measures as an essential part of organization cyber security management. The article integrates several basic standards and three decision making viewpoints as an organisation cyber security architecture framework. The cyber trust factors for organization have been also defined by the researchers in this article. We have also examined how the measures can be considered part of the organization’s process structures while creating trust in its operation within a dynamic cyber environment. Thus, the article recommends and utilizes the PDCA (Plan, Do, Check, Act) method in developing cyber security management practices. In order to put the measures into practice, the leadership of an organisation regard trust-enhancing measures related to cyber security as a strategic goal, maintain efficient processes and communicate their implementation with a policy that supports the strategy.

Keywords: organisations (systems); enterprise architecture; cyber security; safety and security management; trust

Free keywords: architecture; cyber security; organization; PDCA; process; trust

Contributing organizations

Ministry reporting: Yes

Reporting Year: 2020

JUFO rating: 1