Developing a Cybersecurity Framework for Protecting Critical Infrastructure in Organizations

References

[1] Alarfaj, F. K., et al. (2022). Credit card fraud detection using state-of-the-art machine learning and deep learning algorithms. IEEE Access, 10, 39700–39715.

[2] Gadam, V., & Singh, R. (2021). Cybersecurity challenges in critical infrastructure. International Journal of Advanced Research, 9(3), 450-463.

[3] Balogun, h. O., & Adanigbo, O. S. (2024). Implementing Cyber Threat Intelligence and Monitoring in 5G O-RAN: Proactive Protection Against Evolving Threats.

[4] Humphreys, E. (2020). Information security management standards. ISO/IEC 27001. Springer Publishing.

[5] Michael, K., et al. (2024). Artificial intelligence in cybersecurity: A socio-technical framing. IEEE Transactions on Technology and Society.

[6] Moallem, A. (2021). Cybersecurity, privacy, and trust. Handbook of Human Factors and Ergonomics, 1107–1120.

[7] Narayan, M., et al. (2024). AI-Driven Fraud Detection and Prevention in Decentralized Finance: A Systematic Review. AI-Driven Decentralized Finance and the Future of Finance, 89–111.

[8] Rawat, S. (2023). Navigating the Cybersecurity Landscape: Current Trends and Emerging Threats. Journal of Advanced Research, 10(3), 13–19.

[9] Zhu, X., et al. (2021). Intelligent financial fraud detection practices in the post-pandemic era. The Innovation, 2(4).

[10] Anderson, R. (2020). Cybersecurity and critical infrastructure: Securing the digital frontier. Oxford University Press.

[11] Cybersecurity and Infrastructure Security Agency (CISA). (2021). Colonial Pipeline Cyberattack: A wake-up call for critical infrastructure. Retrieved from https://www.cisa.gov

[12] FireEye. (2020). The SolarWinds cyberattack: The state of cybersecurity and critical infrastructure protection. Retrieved from https://www.fireeye.com

[13] Gallagher, M. (2021). Building a cybersecurity framework for critical infrastructure: Best practices and challenges. Journal of Information Security, 32(2), 45-59. https://doi.org/10.1016/j.jise.2020.09.004

[14] NIST. (2018). Framework for improving critical infrastructure cybersecurity (Version 1.1). National Institute of Standards and Technology. Retrieved from https://www.nist.gov/cyberframework

[15] National Research Council. (2012). Cybersecurity for critical infrastructure protection. National Academies Press.

[16] PWC. (2020). Cybersecurity in critical infrastructure: Lessons learned from major attacks. Retrieved from https://www.pwc.com

[17] SANS Institute. (2021). Cybersecurity for critical infrastructure: A comprehensive framework. Retrieved from https://www.sans.org

[18] Schneier, B. (2020). Click here to kill everybody: Security and survival in a hyper-connected world. W. W. Norton & Company.

[19] Shackleford, D., & Sultani, A. (2019). Understanding and implementing cybersecurity frameworks for critical infrastructure. International Journal of Cybersecurity, 5(3), 213-228. https://doi.org/10.1016/j.cyber.2019.07.002

[20] U.S. Department of Homeland Security. (2021). National Critical Functions: A guide to protecting the nation’s most critical assets. Retrieved from https://www.dhs.gov

[21] World Economic Forum. (2022). The Global Risks Report 2022. Retrieved from https://www.weforum.org/reports/global-risks-report-2022

[22] Zhang, M., & Lee, S. (2021). Advanced cybersecurity frameworks for critical infrastructure protection: A comparative study. Journal of Cybersecurity and Infrastructure, 6(1), 34-47. https://doi.org/10.1016/j.jcyb.2020.11.003

[23] Zetter, K. (2020). Countdown to Zero Day: Stuxnet and the launch of the world’s first cyber war. Crown Publishing Group.

[24] Zou, J., & Zhao, H. (2021). Cybersecurity frameworks for industrial control systems: A review of protection strategies for critical infrastructure. Computers & Security, 98, 102073. https://doi.org/10.1016/j.cose.2020.102073

[25] Cybersecurity and Infrastructure Security Agency (CISA). (2021). Colonial Pipeline Cyberattack: A wake-up call for critical infrastructure. Retrieved from https://www.cisa.gov

[26] World Economic Forum. (2022). The Global Risks Report 2022. Retrieved from https://www.weforum.org/reports/global-risks-report-2022

@article{1707001,
      author = {Chisom Elizabeth Alozie, Eze Esther Chinwe},
      title = {Developing a Cybersecurity Framework for Protecting Critical Infrastructure in Organizations},
      journal = {Iconic Research And Engineering Journals},
      year = {2025},
      volume = {8},
      number = {7},
      pages = {562-576},
      issn = {2456-8880},
      url = {https://www.irejournals.com/formatedpaper/1707001.pdf},
      abstract = {Critical infrastructure represents the backbone of societal and economic stability, yet it remains increasingly vulnerable to sophisticated cyber threats. This article develops a comprehensive cybersecurity framework tailored to protect critical infrastructure in organizations. Utilizing a systematic literature review (SLR) and expert consultations, the methodology identifies key gaps in existing frameworks and integrates advanced technologies such as artificial intelligence, blockchain, and zero-trust models to address these gaps. The proposed framework comprises five core components: Risk Assessment, Incident Response, Access Control, Resilience Building, and Governance and Compliance. Validation through case studies, particularly within the healthcare sector, demonstrates its effectiveness in reducing response times, mitigating unauthorized access attempts, and improving overall resilience to cyberattacks. By focusing on sector-specific adaptability, the framework ensures practicality for industries such as energy, healthcare, and finance. Its modular design facilitates scalability, making it accessible to organizations of varying sizes. This research not only bridges critical gaps in cybersecurity practices but also provides actionable insights for policymakers, industry leaders, and IT professionals committed to safeguarding critical infrastructure against evolving threats.},
      keywords = {Critical Infrastructure, Cybersecurity Framework, Risk Assessment, Threat Mitigation, Resilience, Organizations},
      month = {January},
  }