Automated Cyber and Privacy Risk Management Toolkit

Area of Science:

• Information Security
• Risk Management
• Data Privacy

Background:

• Organizations face increasing cyber and privacy risks, necessitating integrated assessment approaches.
• Existing cyber risk assessments are often decoupled from privacy impact assessments (PIAs).
• PIAs are typically conducted proactively during system design to address data protection compliance.

Purpose of the Study:

• To propose an integrated toolkit for automated cyber and privacy risk management.
• To address the limitations of separate cyber risk and privacy impact assessments.
• To provide decision support for selecting optimal security safeguards.

Main Methods:

• Development and integration of three distinct software tools into a unified toolkit named AMBIENT.
• Implementation of automated assessment for both cyber and privacy risks.
• Integration of decision-support capabilities for recommending safeguards based on the Center for Internet Security (CIS) Controls.

Main Results:

• The AMBIENT toolkit offers a holistic and automated approach to assessing cyber and privacy risks.
• It provides decision-support for selecting appropriate safeguards, enhancing risk mitigation strategies.
• A case scenario from the healthcare sector demonstrates the toolkit's practical application.

Conclusions:

• AMBIENT is presented as the first academic toolkit to integrate automated cyber and privacy risk assessment with decision support for safeguard selection.
• The toolkit addresses critical cyber and privacy threats, particularly relevant for sectors like healthcare.
• This integrated approach enhances organizational resilience against evolving digital risks.