Cybersecurity Risk Management in the Age of Digital Transformation: A Systematic Literature Review

Аннотация

The cloud, the IoT, AI, and elaborate advances in data analytics have radically changed organizational business models and practices, in terms of digital transformation of various industries. The high rate of technological change, however, has also led to an increase of cybersecurity threats, which have high levels of threats to information integrity, privacy and continuity of operation. The following paper consists of a systematically reviewed literature analysis of the existing cybersecurity risk management practices within the framework of digital transformation, which analyzes the evidence between the year 2014 and 2024 throughout the major scholarly databases. At the end of the selection out of 2,311 sources considered, 87 peer- reviewed studies, based on the PRISMA guidelines, were chosen to answer the question of risk typology, assessment methodology, and mitigation frameworks. The American Journal of Engineering and Technology 126 https://www.theamericanjournals.com/index.php/tajet Among other trends outlined in the review, there is a The modern cyber reality is characterized by a significant transition to the paradigm of proactive risk spectacular increase in the volume of threats, their management and focus on real-time management, AI- complexity and effects. IBM Cost of a Data Breach optimized threat identification, and cross-sector Report 2023 shows that the average cost of a data security cooperation. It lumps cybersecurity risk into breach in the world was USD 4.45 million; this figure has technical risks, human risks, procedural risks and third- grown by 15 percent in three years. Also, more than 83 party risks and it exposes risks faced by the sectors, percent of surveyed organizations had multiple data particularly the healthcare center, the finance and the breaches experienced with a span of a year ^1^. These energy systems. More so, the findings define the low statistics not just suggest the widespread nature of application of quantitative risk assessment models in the online attacks but also how outdated traditional and practice even though they have been found useful in the dynamic security measures are in the new age of academic research. The review reveals marked technology. The conventional perimeter-based models deficiencies in longitudinal risk assessment, sectoral bias of cybersecurity are no longer adequate as organizations in failure to establish literature especially in the integrate and interconnect systems, third-party developing economies. This paper can effectively form a integrations, and autonomous platforms in their critical basis of future research and strategic policy- business. Zero Trust designs, behavior analytics, and making by summarizing the existing state of knowledge artificial intelligence-based monitoring have been and determining urgent challenges. It provides a well- supplanting signature-based, rule-based ones, and grounded evidence framework to organizations willing preventative approaches to risk management require to develop adaptive, resilient, and data-based adaptiveness and predictability to keep up with and cybersecurity risk management systems that comply respond to the changing threat landscape. with the expectations of the digital era. Additional drivers of the necessity to manage the risk Keywords: Cybersecurity, Digital Transformation, Risk related to cybersecurity are the regulatory and Management, Information Security, Systematic Review reputation risks. The emergence of data privacy laws, like General Data Protection Regulation (GDPR), 1. Introduction California Consumer Privacy Act (CCPA) and industry Digital transformation has taken over the entire world specific data privacy laws in the financial and healthcare and this has become one of the paradigms that industries have committed the organizations to legally characterize the business environment and governance and morally ensuring the confidentiality, integrity and of the 21 st century. Increased investment by availability of the digital assets. A failure to comply may organizations of all kinds, both public and privately not only lead to serious financial charges but it may also owned, is being made to improve productivity, lead to erosion of brand in the long-run as well as loss of personalization of services and to have a competitive stakeholder confidence. Moreover, digital advantage in fast-changing markets through transformation usually involves a quick cultural change investments in digital infrastructure, cloud platforms, within companies where staff members have to get artificial intelligence (AI), the Internet of Things (IoT), adjusted to new technology and processes. And this and advanced analytics. Nevertheless, this rapid human factor is still the most vulnerable point of cyber embracement of the new technologies has also security since insider threats, social engineering and increased the attack surface of digital ecosystems and human error still represent a large fraction