DEFINING CYBERSECURITY MANAGEMENT
DOI:
https://doi.org/10.17512/znpcz.2026.3.03Keywords:
cyberattacks, cybersecurity, cybersecurity managementAbstract
Cybersecurity has become one of the most important topics in both academic research and the practice of public and private organizations. Relatively little attention, however, has been devoted to the management of cybersecurity itself. Central to this article is a literature review encompassing 30 scholarly publications published over the past decade. The review, conducted from the perspective of cybersecurity management, identified the following areas that are directly or indirectly related to this subject: cyber incidents and protection tools, cybersecurity, and cybersecurity management itself. Based on the literature review, the author derived 17 concise statements that serve as a foundation for defining cybersecurity management. Following an analysis of these statements, the author formulated a proposed definition of cybersecurity management.
References
Al-Shattarat, W., Benameur, K., Mostafa, M. M., Hassanein, A., & Hamed, R. S. (2025). A dec-ade
of cybersecurity research in business, management, and accounting: Bibliometric analyses and
future research directions. Cogent Business & Management, 12(1), 1-26. https://doi.org/10.1080/23311975.2025.2544230
Banasiński, C. (2018). Podstawowe pojęcia i podstawy prawne bezpieczeństwa w cyberprzestrze-ni.
In C. Banasiński (Red.), Cyberbezpieczeństwo. Zarys wykładu (pp. 21-65). Wolters Kluwer
Polska.
Bederna, Z., Rajnai, Z., & Szadeczky, T. (2021). Business strategy analysis of cybersecurity inci-dents. Revista Academiei Forţelor Terestre, 26(2), 139-149.
https://doi.org/10.2478/raft-2021-0020
Bhavsar, V., Kadlak, A., & Sharma, S. (2018). Study on phishing attacks. International Journal
of Computer Applications, 182(33), 27-29. https://doi.org/10.5120/ijca2018918286
Cavelty, M. D., & Wenger, A. (2020). Cyber security meets security politics: Complex technolo-gy, fragmented politics, and networked science. Contemporary Security Policy, 41(1), 5-32. https://doi.org/10.1080/13523260.2019.1678855
CERT Polska. (2026). Raport roczny 2025 z działalności CERT Polska – Krajobraz bezpieczeń-stwa polskiego Internetu. Państwowy Instytut Badawczy NASK.
Craigen, D., Diakun-Thibault, N., & Purse, R. (2014). Defining cybersecurity. Technology Inno-vation Management Review, 4(10), 13-21. https://doi.org/10.22215/timreview/835
Creese, S., Dutton, W. H., Esteve-González, P., & Shillair, R. (2021). Cybersecurity capacity-building: Cross-national benefits and international divides. Journal of Cyber Policy, 6(2), 214-235. https://doi.org/10.1080/23738871.2021.1979617
Dominguez-Dorado, M., Rodríguez-Pérez, J., Carmona-Murillo, J., Cortés-Polo, D., & Calle-Cancho, J. (2023). Boosting holistic cybersecurity awareness with outsourced wide-scope CyberSOC:
A generalization from a Spanish public organization study. Information, 14, Article 586. https://doi.org/10.3390/info14110586
Douligeris, C., & Mitrokotsa, A. (2004). DDoS attacks and defense mechanisms: Classification and state-of-the-art. Computer Networks, 44(5), 643-666.
https://doi.org/10.1016/j.comnet.2003.10.003
Fuksiewicz, M. (2023). Rodzaje i cechy charakterystyczne cyberataków oraz zarys działań w obszarze cyberbezpieczeństwa. Zeszyty Naukowe Wyższej Szkoły Bankowej w Poznaniu, 102(3), 51-63. https://doi.org/10.58683/dnswsb.615
Georgiadou, A., Mouzakitis, S., & Askounis, D. (2022). Detecting insider threat via a cyber-security culture framework. Journal of Computer Information Systems, 62(4), 706-716. https://doi.org/10.1080/08874417.2021.1903367
Guang, H., He, J., Zheng, B., Gong, W., Shi, J., Wu, H., Cao, J., Yang, S., & Karimi, H. R. (2025). Perspective: A novel resilient cybersecurity management system for connected and auto-mated vehicles. Automotive Innovation, 8, 335-367. https://doi.org/10.1007/s42154-025-00355-x
Islam, S., Basheer, N., Papastergiou, S., Ciampi, M., & Silvestri, S. (2025). Intelligent dynamic
cybersecurity risk management framework with explainability and interpretability of AI models for enhancing security and resilience of digital infrastructure. Journal of Reliable In-telligent
Environments, 11, Article 12. https://doi.org/10.1007/s40860-025-00253-3
Jones, G., Kasimatis, D., Pitropakis, N., Macfarlane, R., & Buchanan, W. J. (2025). Analysing the role of LLMs in cybersecurity incident management. International Journal of Information Security, 24, Article 228. https://doi.org/10.1007/s10207-025-01144-7
Karlsson, D., Boholm, M., & Berlin, J. (2025). Does inter-municipal collaboration strengthen cybersecurity?. Journal of Cyber Policy, 10, 298-317. https://doi.org/10.1080/23738871.2026.2642608
Karpiuk, M. (2021). Organisation of the national system of cybersecurity: Selected issues. Studia
Iuridica Lublinensia, 30(2), 233-244. https://doi.org/10.17951/sil.2021.30.2.233-244
Khalifa, M., & Taha, A. (2026) AI-driven cybersecurity risk management in organizations: Threat
intelligence, automation, and resilience. World Research of Business Administration Journal, 6(1), 50-66. https://doi.org/10.56830/WRBA03202604
Kshetri, N. (2021). Cybersecurity management: An organizational and strategic approach. Uni-versity of Toronto Press. https://doi.org/10.3138/9781487531249
Lakhno, V., Kasatkin, D., Mohylnyi, H., Desiatko, A., Zhyrova, T., Khorolska, K., & Kotenko, N. (2026). Application of cognitive and cyber modelling for cybersecurity risk management in
Automated Process Control Systems. Journal of Electronics and Telecommunications, 72(3),
1-9. https://doi.org/10.24425/ijet.2026.1713
Lee, Y., & Park, J. (2015). Value creation and value capture: The case of Cybershelter for infor-mation systems security in South Korea. Journal of Information Technology Case and Ap-plication
Research, 17, 74-92. https://doi.org/10.1080/15228053.2015.1041351
Lehto, M., & Limnell, J. (2021). Strategic leadership in cyber security: Case Finland. Information
Security Journal: A Global Perspective, 30(3), 139-148. https://doi.org/10.1080/19393555.2020.1813851
Leppänen, A., & Kankaanranta, T. (2020). Co-production of cybersecurity: A case of reported data system break-ins. Police Practice and Research, 21(1), 78-94. https://doi.org/10.1080/15614263.2018.1525382
Lisiak-Felicka, D., & Pytko, M. (2017). Cyberbezpieczeństwo urzędów gmin w województwie łódzkim. Przedsiębiorczość i Zarządzanie, 18(4), 439-451.
Mąkosa, G. (2019). Zarządzanie ryzykiem jako determinanta cyberbezpieczeństwa. Nowoczesne
Systemy Zarządzania, 14(3), 67-80. https://doi.org/10.37055/nsz/132731
Negi, R., Kant, V., Angelin, A., Lakshana, L. N., Singh, A., & Shukla, S. K. (2025). Augmenting analyst thinking through human-centered design to enable asset management in cybersecuri-ty.
Cognition, Technology & Work, 27, 525-540. https://doi.org/10.1007/s10111-025-00812-x
Norris, D. F., Mateczun, L. K., & Forno, R. F. (2022). Managing local government cybersecurity.
In D. F. Norris, L. K. Mateczun, & R. F. Forno (Eds.), Cybersecurity and local government
(pp. 85-111). Wiley. https://doi.org/10.1002/9781119788317.ch6
Nuiaa, R., Manickam, S., & Alsaeedi, A. H. (2022). A comprehensive review of DNS-based distributed reflection denial of service (DRDoS) attacks: State-of-the-art. International Journal on
Advanced Science, Engineering and Information Technology, 12(6), 2452-2461. https://doi.org/10.18517/ijaseit.12.6.17280
Oleksiewicz, I. (2020). Reforma polityki cyberbezpieczeństwa Unii Europejskiej. Teka of Political Science and International Relations, 15(2), 7-23. https://doi.org/10.17951/teka.2020.15.2.7-23
Pigola, A., & da Costa, P. R. (2025). Cybersecurity management: an empirical analysis of dynam-ic capabilities framework for enhancing cybersecurity intelligence. Information and Com-puter
Security, 33(4), 473-498. https://doi.org/10.1108/ICS-08-2024-0185
Pigola, A., & de Souza Meirelles, F. (2024). Unraveling trust management in cybersecurity: In-sights from a systematic literature review. Information Technology and Management, 27, 71-93. https://doi.org/10.1007/s10799-024-00438-x
Schatz, D., Bashroush, R., & Wall, J. (2017). Towards a more representative definition of cyber
security. Journal of Digital Forensics, Security and Law, 12(2), 53-74. https://doi.org/10.15394/jdfsl.2017.1476
Schiliro, F. (2023). Towards a Contemporary Definition of Cybersecurity. arXiv preprint arXiv:2302.02274. https://doi.org/10.48550/arXiv.2302.02274
Siyaya, M. C., Dubihlela, J., & Sibanda, M. (2025). A literature review of internal auditing in-volvement in cybersecurity risk management of the organization. Journal of Contemporary Management, 22, Special Issue 1, 89-115. https://doi.org/10.35683/jcm24.030.293
von Solms, B., & von Solms, R. (2018). Cybersecurity and information security – what goes where?. Information and Computer Security, 26(1), 2-9. https://doi.org/10.1108/ICS-04-2017-0025
Yereshko, J., Bozhinov, P., Udovychenko, I., Dobrovolskienė, N., & Tsimoshynska, O. (2026). A dual-layer hybrid security framework: analyzing digital models to enhance cybersecurity management for start-ups and SMEs. Business Management, 36(1), 52-67. https://doi.org/10.58861/tae.bm.2026.1.03
Zaidan, M. N., & Massoudi, A. H. (2025). The impact of technological and economic factors on
cybersecurity management and MSME performance. International Business and Manage-ment Review, 20(3), 1-16. https://doi.org/10.18568/internext.v20i03.847
Downloads
Published
Issue
Section
License
Copyright (c) 2026 Konrad Głębocki (Autor)
This work is licensed under a Creative Commons Attribution 4.0 International License.
Authors retain copyright and grant the journal the right of first publication, with the work simultaneously licensed under a Creative Commons Attribution 4.0 International License, which permits others to share the work with appropriate acknowledgment of the authorship and initial publication in this journal.
