Cybersecurity Risk Assessment: A Systematic Mapping Review, Proposal, and Validation

Incorporating technologies across all sectors has meant that cybersecurity risk assessment is now a critical step in management. However, can be complicated process for organizations. Therefore, many authors have attempted to automate this using qualitative and quantitative tools. The problems with the tools stage general are (1) not considering sub-steps of (2) identifying variables necessary an accurate calculation. To address these issues, article presents systematic mapping review (SMR) based on studies published last decade. As result, we identify describe 35 from 40 primary studies. Most were between 2012 2020, indicating upward trend cyber tool publication recent years. main objectives paper to: (I) differences (reference models applications) coverage models, (II) relevant variables, (III) propose model (qualitative quantitative) considers sub-stages stage, (IV) obtain proposed by experts field cybersecurity. proposal was sent group 28 who approved their relevance majority use but preference