Search

Cybersecurity attacks have increased in recent years, both on the EU and global levels, in terms of their number and impact. The public administration sector is particularly at risk, as this is where most cybersecurity attacks take place. It is therefore important to develop comprehensive information security strategies on both the organizational and national level. Strategies help to set up a relatively long-term focus and priorities. The aim of our study is to understand how the EU member countries deal with such challenges. To achieve this, we analyze three indices: the level of penetration (PL), level of digitalization (DL), and global cybersecurity index (GCI). We examine individual national strategies to provide a basis for a comparative analysis which can serve as a reference for improving the long-term cybersecurity in the public administration. [ABSTRACT FROM AUTHOR]

Security requirements are an important part of modern information systems. In the past, they have been implemented in final stages of the information systems development. Though, there are many approaches and publications in the field of security requirements engineering, there is a gap in how to find the most relevant sources. To this end, we present a novel approach to discover knowledge from academic databases. It enables a qualitative and quantitative analysis of scientific publications in the field of security requirements engineering. A special attention is paid to standards in the field of information security and other knowledge bases that create an added value in understanding the security requirements engineering. The VOSviewer software for keyword analysis in scientific publications in the academic database Web of Science Core Collection (a total of 319 scientific publications analyzed) is used. As part of this, two visualizations of clustering (a solution with five and two clusters) are highlighted. The results show that the most popular standards and methodologies in the field of information security are family of the ISO/IEC standards 27000, NIST 800-53 and Tropos. The presented approach is applicable also to other areas. [ABSTRACT FROM AUTHOR]