{"id":"https://openalex.org/W7128364329","doi":"https://doi.org/10.56830/ijams01202604","title":"Cyber security Risk Management: A Theoretical Study","display_name":"Cyber security Risk Management: A Theoretical Study","publication_year":2026,"publication_date":"2026-02-08","ids":{"openalex":"https://openalex.org/W7128364329","doi":"https://doi.org/10.56830/ijams01202604"},"language":"en","primary_location":{"id":"doi:10.56830/ijams01202604","doi":"https://doi.org/10.56830/ijams01202604","is_oa":false,"landing_page_url":"https://doi.org/10.56830/ijams01202604","pdf_url":null,"source":{"id":"https://openalex.org/S4387282920","display_name":"International Journal of Accounting and Management Sciences","issn_l":"2832-8175","issn":["2832-8175","2834-8923"],"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Accounting and Management Sciences","raw_type":"journal-article"},"volume":null,"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5125391226","display_name":"Noora A. Hassan","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Noora A. Hassan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5116136270","display_name":"Esam Omar Elharon","orcid":"https://orcid.org/0000-0002-7241-8540","observed_orcids":["https://orcid.org/0000-0002-7241-8540"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Esam O. Elharon","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5125379290","display_name":"Ahmed A. Metwally","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I114794399","display_name":"Suez Canal University","ror":"https://ror.org/02m82p074","country_code":"EG","type":"education","lineage":["https://openalex.org/I114794399"]}],"countries":["EG"],"is_corresponding":false,"raw_author_name":"Ahmed Z. Metwally","raw_affiliation_strings":["Suez Canal University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Suez Canal University","institution_ids":["https://openalex.org/I114794399"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.05359149,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"5","issue":"1","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11572","display_name":"Information Technology Governance and Strategy","score":0.00019999999494757503,"subfield":{"id":"https://openalex.org/subfields/1404","display_name":"Management Information Systems"},"field":{"id":"https://openalex.org/fields/14","display_name":"Business, Management and Accounting"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T13983","display_name":"Cybersecurity and Information Systems","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/cybersecurity-risk-management","display_name":"cyber risk management","score":0.9900000095367432},{"id":"https://openalex.org/keywords/cyber-threats","display_name":"cyber threats","score":0.8889999985694885},{"id":"https://openalex.org/keywords/ransomware","display_name":"ransomware","score":0.7760000228881836},{"id":"https://openalex.org/keywords/malware","display_name":"malware","score":0.9819999933242798},{"id":"https://openalex.org/keywords/ddos-attacks","display_name":"DDoS attacks","score":0.925000011920929},{"id":"https://openalex.org/keywords/risk-assessment","display_name":"risk assessment","score":0.7360000014305115},{"id":"https://openalex.org/keywords/risk-register","display_name":"risk register","score":0.7390000224113464},{"id":"https://openalex.org/keywords/risk-reduction","display_name":"risk mitigation","score":0.6179999709129333},{"id":"https://openalex.org/keywords/iso-iec-27001","display_name":"ISO/IEC 27001","score":0.972000002861023},{"id":"https://openalex.org/keywords/nist-csf","display_name":"NIST CSF","score":0.9160000085830688},{"id":"https://openalex.org/keywords/data-loss","display_name":"data loss","score":0.5460000038146973},{"id":"https://openalex.org/keywords/organizational-resilience","display_name":"organizational resilience","score":0.7689999938011169},{"id":"https://openalex.org/keywords/risk-monitoring","display_name":"risk monitoring","score":0.4189999997615814}],"concepts":[{"id":"https://openalex.org/C2779585090","wikidata":"https://www.wikidata.org/wiki/Q3457762","display_name":"Resilience (materials science)","level":2,"score":0.7264000177383423},{"id":"https://openalex.org/C32896092","wikidata":"https://www.wikidata.org/wiki/Q189447","display_name":"Risk management","level":2,"score":0.677299976348877},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6478999853134155},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.5965999960899353},{"id":"https://openalex.org/C12174686","wikidata":"https://www.wikidata.org/wiki/Q1058438","display_name":"Risk assessment","level":2,"score":0.49480000138282776},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.48559999465942383},{"id":"https://openalex.org/C165609540","wikidata":"https://www.wikidata.org/wiki/Q1172486","display_name":"Data breach","level":2,"score":0.4726000130176544},{"id":"https://openalex.org/C164403151","wikidata":"https://www.wikidata.org/wiki/Q7336280","display_name":"Risk management framework","level":4,"score":0.462799996137619},{"id":"https://openalex.org/C2780771206","wikidata":"https://www.wikidata.org/wiki/Q3271761","display_name":"Safeguard","level":2,"score":0.41519999504089355},{"id":"https://openalex.org/C3018725008","wikidata":"https://www.wikidata.org/wiki/Q4071928","display_name":"Cyber threats","level":2,"score":0.39399999380111694},{"id":"https://openalex.org/C95609273","wikidata":"https://www.wikidata.org/wiki/Q5975208","display_name":"IT risk management","level":3,"score":0.39079999923706055},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.38029998540878296},{"id":"https://openalex.org/C29852176","wikidata":"https://www.wikidata.org/wiki/Q373338","display_name":"Critical infrastructure","level":2,"score":0.3686999976634979},{"id":"https://openalex.org/C2779033394","wikidata":"https://www.wikidata.org/wiki/Q5186733","display_name":"Critical infrastructure protection","level":3,"score":0.349700003862381},{"id":"https://openalex.org/C2778143579","wikidata":"https://www.wikidata.org/wiki/Q831801","display_name":"Business continuity","level":2,"score":0.3375999927520752},{"id":"https://openalex.org/C62555980","wikidata":"https://www.wikidata.org/wiki/Q1460420","display_name":"Emergency management","level":2,"score":0.33390000462532043},{"id":"https://openalex.org/C186870795","wikidata":"https://www.wikidata.org/wiki/Q1114582","display_name":"IT risk","level":4,"score":0.3287000060081482},{"id":"https://openalex.org/C2780952636","wikidata":"https://www.wikidata.org/wiki/Q13479512","display_name":"Incident management","level":2,"score":0.3264999985694885},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.32260000705718994},{"id":"https://openalex.org/C83163435","wikidata":"https://www.wikidata.org/wiki/Q3954104","display_name":"Security management","level":2,"score":0.31520000100135803},{"id":"https://openalex.org/C121017731","wikidata":"https://www.wikidata.org/wiki/Q11661","display_name":"Information technology","level":2,"score":0.3084999918937683},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.3059999942779541},{"id":"https://openalex.org/C2780851881","wikidata":"https://www.wikidata.org/wiki/Q1141276","display_name":"Crisis management","level":2,"score":0.2971000075340271},{"id":"https://openalex.org/C207209096","wikidata":"https://www.wikidata.org/wiki/Q848268","display_name":"Enterprise risk management","level":3,"score":0.29249998927116394},{"id":"https://openalex.org/C201307755","wikidata":"https://www.wikidata.org/wiki/Q4071928","display_name":"Cyber-attack","level":2,"score":0.2856999933719635},{"id":"https://openalex.org/C207267971","wikidata":"https://www.wikidata.org/wiki/Q120208","display_name":"Emerging technologies","level":2,"score":0.27410000562667847},{"id":"https://openalex.org/C89623803","wikidata":"https://www.wikidata.org/wiki/Q12184","display_name":"Pandemic","level":5,"score":0.26930001378059387},{"id":"https://openalex.org/C148976360","wikidata":"https://www.wikidata.org/wiki/Q1662500","display_name":"Information security management","level":5,"score":0.262800008058548},{"id":"https://openalex.org/C69360830","wikidata":"https://www.wikidata.org/wiki/Q1172237","display_name":"Data Protection Act 1998","level":2,"score":0.2603999972343445},{"id":"https://openalex.org/C195094911","wikidata":"https://www.wikidata.org/wiki/Q14167904","display_name":"Process management","level":1,"score":0.25999999046325684},{"id":"https://openalex.org/C127627568","wikidata":"https://www.wikidata.org/wiki/Q1639361","display_name":"Sociotechnical system","level":2,"score":0.258899986743927},{"id":"https://openalex.org/C56739046","wikidata":"https://www.wikidata.org/wiki/Q192060","display_name":"Knowledge management","level":1,"score":0.2583000063896179},{"id":"https://openalex.org/C171769113","wikidata":"https://www.wikidata.org/wiki/Q849340","display_name":"Cyberwarfare","level":2,"score":0.25270000100135803}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.56830/ijams01202604","doi":"https://doi.org/10.56830/ijams01202604","is_oa":false,"landing_page_url":"https://doi.org/10.56830/ijams01202604","pdf_url":null,"source":{"id":"https://openalex.org/S4387282920","display_name":"International Journal of Accounting and Management Sciences","issn_l":"2832-8175","issn":["2832-8175","2834-8923"],"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Accounting and Management Sciences","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":22,"referenced_works":["https://openalex.org/W3003954441","https://openalex.org/W3113214269","https://openalex.org/W3127950237","https://openalex.org/W3187985969","https://openalex.org/W3193544805","https://openalex.org/W3193717110","https://openalex.org/W4224142968","https://openalex.org/W4280561662","https://openalex.org/W4313259706","https://openalex.org/W4319970264","https://openalex.org/W4324026208","https://openalex.org/W4378905207","https://openalex.org/W4387231981","https://openalex.org/W4391934842","https://openalex.org/W4393091581","https://openalex.org/W4399022638","https://openalex.org/W4400539470","https://openalex.org/W4402893547","https://openalex.org/W4408812455","https://openalex.org/W4410632670","https://openalex.org/W4413292588","https://openalex.org/W4413453715"],"related_works":["https://openalex.org/W4398208673","https://openalex.org/W7127140736","https://openalex.org/W7204493174","https://openalex.org/W7125186885","https://openalex.org/W7130715806","https://openalex.org/W3049245184","https://openalex.org/W4413276942","https://openalex.org/W4412501132","https://openalex.org/W4379984913","https://openalex.org/W4415621084"],"abstract_inverted_index":{"This":[0],"paper":[1,111],"explores":[2],"the":[3,85,129,147,168],"evolving":[4],"landscape":[5],"of":[6,19,150],"cybersecurity":[7,75,151],"risk":[8,76,108,152,172],"management,":[9],"emphasizing":[10],"its":[11],"critical":[12],"importance":[13],"for":[14,42],"organizations":[15],"handling":[16],"vast":[17],"amounts":[18],"sensitive":[20],"data.":[21],"With":[22],"cyberattacks":[23],"rising":[24],"dramatically\u2014from":[25],"individual-targeted":[26],"threats":[27,50],"to":[28,137,182],"complex":[29],"assaults":[30],"on":[31],"businesses":[32],"and":[33,55,68,91,94,102,119,128,140,157,175,186],"nations\u2014managing":[34],"these":[35],"risks":[36,96],"has":[37],"become":[38],"a":[39,73,107],"top":[40],"priority":[41],"experts":[43],"worldwide.":[44],"The":[45,110,144],"study":[46],"outlines":[47],"common":[48],"cyber":[49,142,191],"such":[51,166],"as":[52,167,179],"malware,":[53],"ransomware,":[54],"distributed":[56],"denial-of-service":[57],"attacks,":[58],"highlighting":[59],"their":[60],"severe":[61],"consequences":[62],"including":[63,122],"data":[64],"loss,":[65],"reputational":[66],"damage,":[67],"operational":[69],"disruption.":[70],"It":[71],"presents":[72],"comprehensive":[74],"management":[77,153],"framework":[78],"that":[79],"involves":[80],"five":[81],"key":[82],"steps:":[83],"scoping":[84],"assessment,":[86,173],"identifying":[87],"risks,":[88],"analyzing":[89],"likelihood":[90],"impact,":[92],"prioritizing":[93],"treating":[95],"through":[97],"avoidance,":[98],"transfer,":[99],"or":[100],"mitigation,":[101],"documenting":[103],"all":[104],"findings":[105],"in":[106],"register.":[109],"also":[112],"discusses":[113],"recognized":[114],"standards":[115],"like":[116],"ISO":[117],"27001,":[118],"prominent":[120],"frameworks":[121],"NIST":[123],"CSF,":[124],"DoD":[125],"RMF,":[126],"FAIR,":[127],"AICPA":[130],"reporting":[131],"framework,":[132],"each":[133],"providing":[134],"structured":[135],"approaches":[136],"identify,":[138],"evaluate,":[139],"mitigate":[141],"risks.":[143],"conclusion":[145],"underscores":[146],"increasing":[148],"complexity":[149],"amid":[154],"technological":[155],"advances":[156],"regulatory":[158],"pressures,":[159],"particularly":[160],"intensified":[161],"by":[162],"recent":[163],"global":[164],"challenges":[165],"COVID-19":[169],"pandemic.":[170],"Continuous":[171],"reassessment,":[174],"monitoring":[176],"are":[177],"advocated":[178],"essential":[180],"practices":[181],"safeguard":[183],"organizational":[184],"assets":[185],"ensure":[187],"resilience":[188],"against":[189],"emerging":[190],"threats.":[192]},"counts_by_year":[],"updated_date":"2026-10-28T10:33:24.094632","created_date":"2026-02-10T00:00:00"}