Integrating Cyber Risk into Your Program Lifecycle

References

[1] Monostori, L., Kádár, B., Bauernhansl, T., Kondoh, S., Kumara, S., Reinhart, G., ... & Ueda, K. "Cyber-physical systems in manufacturing." CIRP Annals, 65.2 (2016): 621-641.

[2] More, A. & Unnikrishnan, R. "AI-powered analytics in product marketing: Optimizing customer experience and market segmentation." Sarcouncil Journal of Multidisciplinary, 4.11 (2024):12-19.

[3] Munawar, H. S., Qayyum, S., Ullah, F. & Sepasgozar, S. "Big data and its applications in smart real estate and the disaster management life cycle: A systematic analysis." Big Data and Cognitive Computing, 4.2 (2020): 4.

[4] Pelluru, K. "Integrate security practices and compliance requirements into DevOps processes." MZ Computing Journal, 2.2 (2021): 1-19.

[5] Mohebbi, S., Zhang, Q., Wells, E. C., Zhao, T., Nguyen, H., Li, M., ... & Ou, X."Cyberphysical-social interdependencies and organizational resilience: A review of water, transportation, and cyber infrastructure systems and processes." Sustainable Cities and Society, 62 (2020): 102327.

[6] Dunn Cavelty, M. & Wenger, A. "Cyber security meets security politics: Complex technology, fragmented politics, and networked science." Contemporary Security Policy, 41.1 (2020): 5-32.

[7] Fagnant, D. J. & Kockelman, K. "Preparing a nation for autonomous vehicles: Opportunities, barriers, and policy recommendations." Transportation Research Part A: Policy and Practice, 77 (2015): 167-181.

[8] Garcia-Perez, A., Cegarra-Navarro, J. G., Sallos, M. P., Martinez-Caro, E. & Chinnaswamy, A. "Resilience in healthcare systems: Cyber security and digital transformation." Technovation, 121 (2023): 102583.

[9] Jain, S. "Privacy vulnerabilities in modern software development: Cyber security solutions and best practices." Sarcouncil Journal of Engineering and Computer Sciences, 2.12 (2023): 1-9.

[10] Jain, S. "Integrating privacy by design: Enhancing cyber security practices in software development." Sarcouncil Journal of Multidisciplinary, 4.11 (2024): 1-11

[11] Jindal, G. & Nanda, A. "AI and data science in financial markets: Predictive modeling for stock price forecasting." Library Progress International, 44.3 (2024): 22145-22152.

[12] El Amin, H., Samhat, A. E., Chamoun, M., Oueidat, L., & Feghali, A. (2024). An Integrated Approach to Cyber Risk Management with Cyber Threat Intelligence Framework to Secure Critical Infrastructure. Journal of Cybersecurity and Privacy, 4(2), 357‑381.

[13] Al‑Janabi, S. (2024). Cyber-Resilient IT Project Management Framework harmonizing cybersecurity risk with IT project lifecycle. MDPI MDPI

[14] Saeed, H. (2025). Review of Techniques for Integrating Security in Software Development Lifecycle (SDLC). ScienceDirect. ScienceDirect+1ResearchGate+1

[15] Khan, H. U. et al. (2025). AI‑driven cybersecurity framework for software development lifecycle integration. Nature Scientific Reports. en.wikipedia.org+11nature.com+11ResearchGate+11

[16] Lier, S. K. (2025). Iterative five-phase framework for adaptive AI integration in cybersecurity. Springer. link.springer.com

[17] Chong, W. F., Feng, R., Hu, H., & Zhang, L. (2022). Cyber Risk Assessment for Capital Management (FAIR‑inspired model). ArXiv. arxiv.org

[18] Uchendu, B., Nurse, J. R. C., Bada, M., & Furnell, S. (2021). Developing a Cyber Security Culture: Current Practices and Future Needs. ArXiv.

[19] Ee, S., O’Brien, J., Williams, Z., et al. (2024). Adapting Cybersecurity Frameworks to Manage Frontier AI Risks. ArXiv. arxiv.org

[20] NIST. (2024). Cybersecurity Framework (CSF) Version 2.0: Identify, Protect, Detect, Respond, Recover.

[21] Microsoft. (2025). Microsoft Security Development Lifecycle (SDL) guidance for secure-by-design software engineering. en.wikipedia.org+1en.wikipedia.org+1

[22] Security Compass (2024). Integrating Security in the SDLC using SD Elements. securitycompass.com

[23] Sandu, A. K. (2021). DevSecOps: Integrating Security into the DevOps Lifecycle for Enhanced Resilience. TMR

[24] Murtaza, S., Harake, M. F. (2025). Integrating Cybersecurity into Project Management Lifecycle. PMWorld Journal. pmworldjournal.com+1pmworldlibrary.net+1

[25] Feringa, A., Goguen, A., Stoneburner, G. (2002 updated 2023). Risk Management within SDLC. NIST guide.

[26] ScienceDirect (2025). Review of Security Techniques in SDLC. ResearchGate

[27] ResearchGate (2025). Cybersecurity Real‑World Applications for SDLC. ResearchGate

@article{1710086,
      author = {Geetha Aradhyula},
      title = {Integrating Cyber Risk into Your Program Lifecycle},
      journal = {Iconic Research And Engineering Journals},
      year = {2025},
      volume = {9},
      number = {2},
      pages = {363-374},
      issn = {2456-8880},
      url = {https://www.irejournals.com/formatedpaper/1710086.pdf},
      abstract = {In today?s increasingly digital and interconnected environment, cybersecurity risks have evolved from isolated IT concerns to critical factors that directly impact the overall success and sustainability of programs across all sectors. As a result, integrating cyber risk into the program lifecycle has become essential to achieving long-term strategic objectives, ensuring regulatory compliance, and safeguarding stakeholder trust. This integration involves embedding cyber risk management practices at every stage of the program lifecycle?from initiation and planning to execution, monitoring, and closure.This approach enables program managers and stakeholders to proactively identify, assess, and mitigate cybersecurity threats that could compromise the confidentiality, integrity, or availability of critical information assets. It also fosters a culture of resilience by aligning cybersecurity with program goals, risk tolerance levels, and governance structures. By adopting a risk-based mindset, organizations can avoid the pitfalls of reactive cybersecurity measures and instead build adaptive, secure-by-design programs. Key components of successful cyber risk integration include threat modeling, continuous risk assessments, cross-functional collaboration, secure procurement and vendor management, and incident response planning. These elements should be revisited and refined as the program evolves, ensuring responsiveness to emerging threats and changes in the business environment.The benefits of this integrated approach extend beyond mere risk reduction. Programs with embedded cyber risk management demonstrate higher levels of operational continuity, better compliance with international standards and regulations (e.g., NIST, ISO/IEC 27001), and improved stakeholder confidence. Moreover, cyber-aware programs are more agile in responding to cyber incidents and recovering from disruptions, thus supporting organizational resilience and reputation.
In conclusion, integrating cyber risk into the program lifecycle is no longer optional?it is a strategic imperative. By making cybersecurity a core element of program planning and execution, organizations can navigate the complex threat landscape with greater confidence and deliver outcomes that are secure, resilient, and future-ready.},
      keywords = {Cyber risk integration, program lifecycle, data protection, cyber threat assessment, risk mitigation, project milestones, cyber governance, secure program delivery, program management, digital resilience.},
      month = {August},
  }