Investigators at Environmental Laboratory Zero in on Risk Management (Resilience of Cyber Systems with Over- and Underregulation)

By a News Reporter-Staff News Editor at Insurance Weekly News -- Investigators publish new report on Risk Management. According to news reporting originating in Concord, Massachusetts, by VerticalNews journalists, research stated, "Recent cyber attacks provide evidence of increased threats to our critical systems and infrastructure. A common reaction to a new threat is to harden the system by adding new rules and regulations."

Financial support for this research came from U.S. Army Corps of Engineers.

The news reporters obtained a quote from the research from Environmental Laboratory, "As federal and state governments request new procedures to follow, each of their organizations implements their own cyber defense strategies. This unintentionally increases time and effort that employees spend on training and policy implementation and decreases the time and latitude to perform critical job functions, thus raising overall levels of stress. People's performance under stress, coupled with an overabundance of information, results in even more vulnerabilities for adversaries to exploit. In this article, we embed a simple regulatory model that accounts for cybersecurity human factors and an organization's regulatory environment in a model of a corporate cyber network under attack. The resulting model demonstrates the effect of under-and overregulation on an organization's resilience with respect to insider threats. Currently, there is a tendency to use ad-hoc approaches to account for human factors rather than to incorporate them into cyber resilience modeling."

According to the news reporters, the research concluded: "It is clear that using a systematic approach utilizing behavioral science, which already exists in cyber resilience assessment, would provide a more holistic view for decisionmakers."

For more information on this research see: Resilience of Cyber Systems with Over- and Underregulation. Risk Analysis, 2016;():. (Wiley-Blackwell - www.wiley.com/; Risk Analysis - onlinelibrary.wiley.com/journal/10.1111/(ISSN)1539-6924)

Our news correspondents report that additional information may be obtained by contacting V. Gisladottir, US Army Corps of Engineers - Engineer Research and Development Center, Environmental Laboratory, Concord, MA, United States. Additional authors for this research include A.A. Ganin, J.M. Keisler, J. Kepner and I. Linkov.

Keywords for this news article include: Concord, Legal Issues, Massachusetts, United States, Risk Management, North and Central America.

Our reports deliver fact-based news of research and discoveries from around the world. Copyright 2017, NewsRx LLC