Computational Analysis of Human and Organisational Decision Processes for the Control of Risk Management and Cybersecurity

This book aims to present in much detail how complex adaptive processes in cybersecurity can be analysed based on multiple levels of adaptation and control in a multilevel adaptive dynamical system architecture. Furthermore, it is shown how such complex adaptive systems can be modelled by self-modelling temporal-causal network models. Here, the temporal dimension is an important factor for different timescales from responding to attacks in milliseconds or seconds to developing more secure infrastructure and well-educated employees in an organisation over months or years. From the applicational perspective, different well-recognised cybersecurity themes are addressed here such as phishing, using complex authentication procedures, cybersecurity in health care, threats far away (third-party contracting), and threats close by (insider threats). Moreover, for the organisational level joint decision-making for cybersecurity is addressed involving, for example, groupthink and organisational alignment.