Cyber Resilience in Multi-Vendor Enterprise Networks: A Framework for Secure Integration, Threat Prevention, and Operational Continuity in Saudi Arabia

References

[1] Alevizos L, Ta VT, Eiza MH (2022). Augmenting zero trust architecture to endpoints using blockchain: A state-of-the-art review. Security and Privacy, 5(1), e191. https://doi.org/10.1002/spy2.191

[2] AlHidaifi SM, Asghar MR, Ansari IS (2024). Towards a cyber resilience quantification framework (CRQF) for IT infrastructure. Computer Networks, 247, 110446. https://doi.org/10.1016/j.comnet.2024.110446

[3] Boyens J, Smith A, Bartol N, Winkler K, Holbrook A, Fallon M (2022). Cybersecurity Supply Chain Risk Management for Systems and Organizations. NIST Special Publication 800–161, Revision 1. https://doi.org/10.6028/NIST.SP.800-161r1

[4] Buck C, Olenberger C, Schweizer A, Völter F, Eymann T (2021). Never trust, always verify: A multivocal literature review on current knowledge and research gaps of zero trust. Computers & Security, 110, 102436. https://doi.org/10.1016/j.cose.2021.102436

[5] Cao Y, Pokhrel SR, Zhu Y, Doss R, Li G (2024). Automation and orchestration of zero trust architecture: Potential solutions and challenges. Machine Intelligence Research, 21, 294–317. https://doi.org/10.1007/s11633-023-1456-2

[6] Cascavilla G, Tamburri DA, van den Heuvel WJ (2021). Cybercrime threat intelligence: A systematic multi-vocal literature review. Computers & Security, 105, 102258. https://doi.org/10.1016/j.cose.2021.102258

[7] Chandramouli R, Butcher Z (2023). A Zero Trust Architecture Model for Access Control in Cloud-Native Applications in Multi-Location Environments. NIST Special Publication 800–207A. https://doi.org/10.6028/NIST.SP.800-207A

[8] Collier ZA, Sarkis J (2021). The zero trust supply chain: Managing supply chain risk in the absence of trust. International Journal of Production Research, 59(11), 3430–3445. https://doi.org/10.1080/00207543.2021.1884311

[9] He Y, Huang D, Chen L, Ni Y, Ma X (2022). A survey on zero trust architecture: Challenges and future trends. Wireless Communications and Mobile Computing, 2022, 6476274. https://doi.org/10.1155/2022/6476274

[10] Katsis C, Cicala F, Thomsen D, Ringo N, Bertino E (2021). Can I reach you? Do I need to? New semantics in security policy specification and testing. Proceedings of the ACM Symposium on Access Control Models and Technologies, 165–174. https://doi.org/10.1145/3450569.3463558

[11] Landauer M, Skopik F, Wurzenberger M, Rauber A (2020). System log clustering approaches for cyber security applications: A survey. Computers & Security, 92, 101739. https://doi.org/10.1016/j.cose.2020.101739

[12] Leivadeas A, Falkner M (2023). A survey on intent-based networking. IEEE Communications Surveys & Tutorials, 25(1), 625–655. https://doi.org/10.1109/COMST.2022.3215919

[13] Mehmood K, Kralevska K, Palma D (2023). Intent-driven autonomous network and service management in future cellular networks: A structured literature review. Computer Networks, 220, 109477. https://doi.org/10.1016/j.comnet.2022.109477

[14] Melis A, Sadi AA, Berardi D, Callegati F, Prandini M (2023). A systematic literature review of offensive and defensive security solutions with software defined network. IEEE Access, 11, 93431–93463. https://doi.org/10.1109/ACCESS.2023.3276238

[15] Mubarkoot M, Altmann J, Rasti-Barzoki M, Egger B, Lee H (2023). Software compliance requirements, factors, and policies: A systematic literature review. Computers & Security, 124, 102985. https://doi.org/10.1016/j.cose.2022.102985

[16] Nelson A, Rekhi S, Scarfone K, Souppaya M (2025). Incident Response Recommendations and Considerations for Cybersecurity Risk Management: A CSF 2.0 Community Profile. NIST Special Publication 800–61, Revision 3. https://doi.org/10.6028/NIST.SP.800-61r3

[17] Pascoe C, Quinn S, Scarfone K (2024). The NIST Cybersecurity Framework (CSF) 2.0. NIST Cybersecurity White Paper 29. https://doi.org/10.6028/NIST.CSWP.29

[18] Reichert BM, Obelheiro RR (2024). Software supply chain security: A systematic literature review. International Journal of Computers and Applications, 46(10), 853–867. https://doi.org/10.1080/1206212X.2024.2390978

[19] Ribeiro RH, Jacobs AS, Zembruzki L, Parizotto R, Scheid EJ, Schaeffer-Filho AE, Granville LZ, Stiller B (2022). A deterministic approach for extracting network security intents. Computer Networks, 214, 109109. https://doi.org/10.1016/j.comnet.2022.109109

[20] Rose S, Borchert O, Mitchell S, Connelly S (2020). Zero Trust Architecture. NIST Special Publication 800–207. https://doi.org/10.6028/NIST.SP.800-207

[21] Ross R, Pillitteri V, Graubart R, Bodeau D, McQuaid R (2021). Developing Cyber-Resilient Systems: A Systems Security Engineering Approach. NIST Special Publication 800–160, Volume 2, Revision 1. https://doi.org/10.6028/NIST.SP.800-160v2r1

[22] Ross R, Pillitteri V (2020). Security and Privacy Controls for Information Systems and Organizations. NIST Special Publication 800–53, Revision 5. https://doi.org/10.6028/NIST.SP.800-53r5

[23] Scarfone K, Souppaya M, Dodson D (2022). Secure Software Development Framework (SSDF) Version 1.1: Recommendations for Mitigating the Risk of Software Vulnerabilities. NIST Special Publication 800–218. https://doi.org/10.6028/NIST.SP.800-218

[24] Shukla A, Katt B, Nweke LO, Yeng PK, Weldehawaryat GK (2022). System security assurance: A systematic literature review. Computer Science Review, 45, 100496. https://doi.org/10.1016/j.cosrev.2022.100496

[25] Stamenkov G (2022). Layered business continuity and disaster recovery model. Continuity & Resilience Review, 4(3), 267–279. https://doi.org/10.1108/CRR-05-2022-0008

[26] Sun PJ (2020). Security and privacy protection in cloud computing: Discussions and challenges. Journal of Network and Computer Applications, 160, 102642. https://doi.org/10.1016/j.jnca.2020.102642

[27] Syed NF, Shah SW, Shaghaghi A, Anwar A, Baig Z, Doss R (2022). Zero trust architecture (ZTA): A comprehensive survey. IEEE Access, 10, 57143–57179. https://doi.org/10.1109/ACCESS.2022.3174679

[28] Teerakanok S, Uehara T, Inomata A (2021). Migrating to zero trust architecture: Reviews and challenges. Security and Communication Networks, 2021, 9947347. https://doi.org/10.1155/2021/9947347

[29] Umer MA, Junejo KN, Jilani MT, Mathur AP (2022). Machine learning for intrusion detection in industrial control systems: Applications, challenges, and recommendations. International Journal of Critical Infrastructure Protection, 38, 100516. https://doi.org/10.1016/j.ijcip.2022.100516

[30] Wang Z, Fok KW, Thing VLL (2023). Machine learning-powered encrypted network traffic analysis: A comprehensive survey. IEEE Communications Surveys & Tutorials, 25(1), 791–824. https://doi.org/10.1109/COMST.2022.3208196

@article{1724646,
      author = {Ataur Rahman Atif Mohammed},
      title = {Cyber Resilience in Multi-Vendor Enterprise Networks: A Framework for Secure Integration, Threat Prevention, and Operational Continuity in Saudi Arabia},
      journal = {Iconic Research And Engineering Journals},
      year = {2026},
      volume = {10},
      number = {5},
      pages = {164-177},
      issn = {2456-8880},
      url = {https://www.irejournals.com/formatedpaper/1724646.pdf},
      abstract = {Enterprises in SA are increasingly reliant on networks which are a mix of equipment from a number of vendors, cloud platforms, security products and managed services. The benefit of this is clearly in terms of procurement flexibility but at the cost of complexity in the areas of identity enforcement, configuration assurance, incident attribution and service restoration. This is a critical integrative review of how interoperability can be achieved without the assumption that the various products in the mix will have the same policy semantics or the same level of operational visibility. A literature review from 2020 to 2025 is combined with relevant engineering guidance in a transparent, theme-based synthesis. There is a clear distinction drawn between preventive cybersecurity and cyber resilience (the ability to anticipate, absorb, adapt to and recover from a disruptive event whilst maintaining the integrity of the essential services). The review identifies five interdependent capabilities: authoritative asset and dependency mapping, vendor neutral policy translation, identity based access control, correlated threat telemetry and independently testable continuity arrangements. On that basis it goes on to propose a layered Secure Integration and Continuity Framework which links enterprise governance to technical controls and to measurable service outcomes. Particular attention is paid to integration interfaces, admin privileges, outsourced maintenance, control plane concentration and recovery dependencies. The framework is in the context of Saudi regulatory expectations and the operational realities of the very rapidly expanding range of digital services. It does not claim to have demonstrated any performance improvements in practice, it simply sets out a number of falsifiable propositions and evaluation metrics for future field studies. The core proposition is that diversity can only become a resilience enabler to the extent that an organisation can demonstrate equivalent security outcomes across the vendor mix and can restore the essential services when the shared coordination systems have failed.},
      keywords = {cyber resilience; multi-vendor networks; zero trust; secure integration; operational continuity; Saudi Arabia},
      month = {November},
  }