A strategic roadmap for cybersecurity capability engineering across different environments

Abstract

Digital transformation is not without risks as the threats posed by cyber-attacks in this day and age are continually on the rise. Cyber-attacks have become pervasive and thus calling for organisations to be vigilant at all times and intentional in preserving the security of critical assets. Inopportunely, cyber-attacks are not selective in nature; as such no organisation is immune to their potential impact that often manifests in financial losses and reputational damage. This challenge gives the development of a cybersecurity capability indisputable primacy as it is relevant to all organisations that reap the benefits of interconnectedness regardless of shape, size, and environment. Be that as it may, it cannot be disputed that each business environment warrants unique consideration for cybersecurity efforts to yield effective results. While capability planning exists as a discipline, there is a lack of a consistent and coherent guide for cybersecurity capability development. This paper aims to bridge this gap by proposing an adaptable roadmap for developing cybersecurity capability following design science research. This roadmap will contribute by presenting practical and flexible guidelines for the development of a cybersecurity capability that can be employed in any business environment. This approach will leverage from an existing capability engineering framework while striving to augment the adaptability of the framework to cybersecurity.