inklap

Using Situational Crime Prevention (SCP)-C3 cycle and common inventory of cybersecurity controls from ISO/IEC 27002:2022 to prevent cybercrimes

Heemeng Ho, Ryan Ko, Lorraine Mazerolle, John Gilmour, Cheng Miao · Journal of Cybersecurity · 2024

Abstract Situational Crime Prevention (SCP) is a well-documented crime prevention approach that reduces criminal opportunities for a range of different crimes. However, SCP adoption in combating cybercrimes is currently limited. Current cybersecurity controls are not mapped to crime prevention techniques, and consequently, it is hard to gauge if existing controls are actually effective in reducing crime opportunities. The dynamic environments and complex nature of cybercrimes—spanning from human-centric cyber-enabled crimes to highly technical cyber-focused crimes—exacerbate the inability to apply or measure cybersecurity controls for crime prevention effectiveness. Using best practices from the globally adopted ISO/IEC 27002:2022 standard, our paper aligns industry best-practice cybersecurity controls with the five SCP strategies and 25 techniques. We conduct a comprehensive review of 1788 peer-reviewed academic articles across computer science, criminal justice, and criminology literature using the PRISMA method. We elucidate how our common inventory of SCP-based cybersecurity controls is developed and the rationale behind the mapping of ISO/IEC controls to SCP cla

📖 افتح في inklap 🔗 DOI 📮 اطلب بحثاً