Systems Thinking in Cybersecurity; Ending with the Beginning in Mind.

Abstract

Despite the increasing complexity of the digital landscape and the rise in cyber-attacks,systems thinking has not been widely utilized in cybersecurity. This research paper employs a SystemsLiterature Review to examine the current state of knowledge regarding the use of systems thinking incybersecurity and identifies several issues, including the lack of consistency in defining "systemsthinking”, narrow use cases, and a lack of empirical evidence supporting the reviewed methods. Differentresearchers and practitioners may have varying interpretations of this concept, leading to confusion and alack of standardizedapproaches. This inconsistency hampers the development of a cohesive frameworkfor applying systems thinking in cybersecurity. To address these challenges, future research should focuson developing a common understanding and definition of systems thinking in the context of cybersecurity.This will facilitate communication and collaboration among researchers and practitioners, leading to moreconsistent and effective approaches. Additionally, there is a need for empirical studies that rigorouslyevaluate the impact of applying systems thinking in cybersecurity. These studies should assess theeffectiveness of different methodologies and frameworks in real-world scenarios, providingevidence-based insights into their benefits and limitations. In conclusion, while the application of systemsthinking in cybersecurity holds promise, there are challenges that need to be addressed. Resolving thesechallenges is crucial for advancing the field and establishing a solid foundation for the application ofsystems thinking in cybersecurity.