The Effects of Cyber-security Risks on Added Value of Consulting Services for IT-security Management Systems in Holding Companies
Ilya I. Livshitz, Pawel A. Lontsikh, Natalya P. Lontsikh, Elena Yu. Golovina, Olga M. Safonova · 2020
Many efforts in IT-security management systems implementation do not always have the expected results. Sometimes they actually require more integrated costs than planned. One of the reasons of this is the lack of robust cyber risk management practices. This statement is particularly applicable to the correct choice and application of robust IT-security management tools when providing the consulting services. This article considers a case of a cyber-security system implementation. A well-known consulting company was involved in the implementation of this project. The provided examples illustrate the choice of IT-security metrics and the use of various IT-security management tools when providing consulting services in a Holding companies.