{"id":"https://openalex.org/W7225614902","doi":"https://doi.org/10.1109/csr69374.2026.11760094","title":"DRCRM: A Dynamic Framework for Regulatory and Certification Readiness for Cyber-Resilient Systems","display_name":"DRCRM: A Dynamic Framework for Regulatory and Certification Readiness for Cyber-Resilient Systems","publication_year":2026,"publication_date":"2026-08-01","ids":{"openalex":"https://openalex.org/W7225614902","doi":"https://doi.org/10.1109/csr69374.2026.11760094"},"language":"en","primary_location":{"id":"doi:10.1109/csr69374.2026.11760094","doi":"https://doi.org/10.1109/csr69374.2026.11760094","is_oa":true,"landing_page_url":"https://doi.org/10.1109/csr69374.2026.11760094","pdf_url":null,"source":{"id":"https://openalex.org/S7407087864","display_name":"IEEE International Conference on Cyber Security and Resilience (CSR)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2026 IEEE International Conference on Cyber Security and Resilience (CSR)","raw_type":"proceedings-article"},"volume":null,"type":"conference-paper","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.1109/csr69374.2026.11760094","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5029602479","display_name":"George Alexandris","orcid":"https://orcid.org/0000-0002-3700-4764","observed_orcids":["https://orcid.org/0000-0002-3700-4764"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"George Alexandris","raw_affiliation_strings":["Nodalpoint Systems"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Nodalpoint Systems","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5050548960","display_name":"Vassiliki Andronikou","orcid":"https://orcid.org/0000-0003-2554-3805","observed_orcids":["https://orcid.org/0000-0003-2554-3805"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Vassiliki Andronikou","raw_affiliation_strings":["Nodalpoint Systems"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Nodalpoint Systems","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5161337866","display_name":"Nikos Pilouras","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Nikos Pilouras","raw_affiliation_strings":["Nodalpoint Systems"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Nodalpoint Systems","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.0,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"583","last_page":"588"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9794999957084656,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9794999957084656,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T13164","display_name":"Quality and Management Systems","score":0.004800000227987766,"subfield":{"id":"https://openalex.org/subfields/1408","display_name":"Strategy and Management"},"field":{"id":"https://openalex.org/fields/14","display_name":"Business, Management and Accounting"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T13295","display_name":"Safety Systems Engineering in Autonomy","score":0.0017000000225380063,"subfield":{"id":"https://openalex.org/subfields/2213","display_name":"Safety, Risk, Reliability and Quality"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/cybersecurity-certification","display_name":"cybersecurity certification","score":0.6779999732971191},{"id":"https://openalex.org/keywords/regulatory-compliance","display_name":"regulatory compliance","score":0.9950000047683716},{"id":"https://openalex.org/keywords/continuous-compliance","display_name":"continuous compliance","score":0.3190000057220459},{"id":"https://openalex.org/keywords/cyber-insurance","display_name":"cyber insurance","score":0.4519999921321869},{"id":"https://openalex.org/keywords/iso-iec-27001","display_name":"ISO/IEC 27001","score":0.890999972820282},{"id":"https://openalex.org/keywords/nis2","display_name":"NiS2","score":0.8220000267028809},{"id":"https://openalex.org/keywords/dora","display_name":"DORA","score":0.8569999933242798},{"id":"https://openalex.org/keywords/compliance-automation","display_name":"compliance automation","score":0.6570000052452087},{"id":"https://openalex.org/keywords/critical-infrastructure","display_name":"critical infrastructure","score":0.6959999799728394}],"concepts":[{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.49149999022483826},{"id":"https://openalex.org/C46304622","wikidata":"https://www.wikidata.org/wiki/Q374814","display_name":"Certification","level":2,"score":0.4878000020980835},{"id":"https://openalex.org/C195094911","wikidata":"https://www.wikidata.org/wiki/Q14167904","display_name":"Process management","level":1,"score":0.4255000054836273},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.3971000015735626},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.3840000033378601},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.32839998602867126},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.3215999901294708},{"id":"https://openalex.org/C168167062","wikidata":"https://www.wikidata.org/wiki/Q1117970","display_name":"Component (thermodynamics)","level":2,"score":0.2915000021457672},{"id":"https://openalex.org/C56739046","wikidata":"https://www.wikidata.org/wiki/Q192060","display_name":"Knowledge management","level":1,"score":0.2874000072479248},{"id":"https://openalex.org/C18762648","wikidata":"https://www.wikidata.org/wiki/Q42213","display_name":"Work (physics)","level":2,"score":0.2825999855995178},{"id":"https://openalex.org/C110354214","wikidata":"https://www.wikidata.org/wiki/Q6314146","display_name":"Engineering management","level":1,"score":0.2766000032424927},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.2750999927520752},{"id":"https://openalex.org/C2778348673","wikidata":"https://www.wikidata.org/wiki/Q739302","display_name":"Production (economics)","level":2,"score":0.26510000228881836},{"id":"https://openalex.org/C182306322","wikidata":"https://www.wikidata.org/wiki/Q1779371","display_name":"Order (exchange)","level":2,"score":0.2538999915122986},{"id":"https://openalex.org/C136197465","wikidata":"https://www.wikidata.org/wiki/Q1729295","display_name":"Variety (cybernetics)","level":2,"score":0.2522999942302704},{"id":"https://openalex.org/C2780009758","wikidata":"https://www.wikidata.org/wiki/Q6804172","display_name":"Measure (data warehouse)","level":2,"score":0.2506999969482422}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/csr69374.2026.11760094","doi":"https://doi.org/10.1109/csr69374.2026.11760094","is_oa":true,"landing_page_url":"https://doi.org/10.1109/csr69374.2026.11760094","pdf_url":null,"source":{"id":"https://openalex.org/S7407087864","display_name":"IEEE International Conference on Cyber Security and Resilience (CSR)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2026 IEEE International Conference on Cyber Security and Resilience (CSR)","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1109/csr69374.2026.11760094","doi":"https://doi.org/10.1109/csr69374.2026.11760094","is_oa":true,"landing_page_url":"https://doi.org/10.1109/csr69374.2026.11760094","pdf_url":null,"source":{"id":"https://openalex.org/S7407087864","display_name":"IEEE International Conference on Cyber Security and Resilience (CSR)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2026 IEEE International Conference on Cyber Security and Resilience (CSR)","raw_type":"proceedings-article"},"sustainable_development_goals":[{"score":0.4943999946117401,"display_name":"Industry, innovation and infrastructure","id":"https://metadata.un.org/sdg/9"}],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":4,"referenced_works":["https://openalex.org/W2618688419","https://openalex.org/W3042690941","https://openalex.org/W4403325981","https://openalex.org/W4403413389"],"related_works":["https://openalex.org/W7009422409","https://openalex.org/W7104408421","https://openalex.org/W3132439313","https://openalex.org/W7225628333","https://openalex.org/W3129585019","https://openalex.org/W3013869645","https://openalex.org/W3201134209","https://openalex.org/W4312815011","https://openalex.org/W6884978307","https://openalex.org/W3204795175"],"abstract_inverted_index":{"Cybersecurity":[0],"certification":[1],"and":[2,18,32,39,54,60,74,97,104,125,142,156,160,168],"regulatory":[3],"compliance":[4,154],"are":[5],"still":[6],"managed":[7],"in":[8,128,166],"many":[9],"organizations":[10],"as":[11,35,52,85],"periodic,":[12],"document-heavy":[13],"exercises":[14],"centered":[15],"on":[16,20,151],"audits":[17],"less":[19],"continuous":[21,152],"operational":[22],"readiness.":[23],"At":[24],"the":[25,71,118,129],"same":[26],"time,":[27],"sectors":[28],"affected":[29],"by":[30],"standards":[31],"regulations":[33],"such":[34,51],"ISO/IEC":[36],"27001,":[37],"NIS2,":[38],"DORA":[40],"increasingly":[41],"need":[42],"sustained":[43],"evidence":[44,99,139],"of":[45,131],"cybersecurity":[46],"posture,":[47],"while":[48],"external":[49],"stakeholders":[50],"auditors":[53],"cyber":[55,157],"insurers":[56],"require":[57],"more":[58],"reliable":[59],"timely":[61],"signals":[62],"than":[63],"static":[64],"questionnaires":[65],"can":[66],"provide.":[67],"This":[68],"paper":[69],"presents":[70],"Dynamic":[72],"Regulation":[73],"Certification":[75],"Readiness":[76],"Model":[77],"(DRCRM),":[78],"a":[79,105,121],"lifecycle-oriented":[80],"framework":[81],"for":[82,109,123],"managing":[83],"readiness":[84,94],"an":[86,132],"ongoing":[87],"process.":[88],"DRCRM":[89,147],"combines":[90],"machine-readable":[91],"checklists,":[92],"organization-specific":[93],"instances,":[95],"manual":[96],"automated":[98],"handling,":[100],"controlled":[101],"stakeholder":[102],"visibility,":[103],"community-based":[106],"contribution":[107],"mechanism":[108],"sharing":[110],"implementation":[111],"practices.":[112],"The":[113],"model":[114],"is":[115],"operationalized":[116],"within":[117],"ERMIS":[119],"platform":[120],"marketplace":[122],"cyberassurance":[124],"-insurance":[126],"developed":[127],"context":[130],"EU-funded":[133],"project,":[134],"which":[135],"enables":[136],"checklist":[137],"discovery,":[138],"integration,":[140],"dashboards,":[141],"access":[143],"control.":[144],"We":[145],"position":[146],"relative":[148],"to":[149],"work":[150],"monitoring,":[153],"automation,":[155],"risk":[158],"transparency,":[159],"we":[161],"discuss":[162],"representative":[163],"use":[164],"cases":[165],"regulated":[167],"critical":[169],"environments.":[170]},"counts_by_year":[],"updated_date":"2026-11-12T12:28:57.059296","created_date":"2026-11-10T00:00:00"}