Assessment of Cybersecurity Risks in the Logistics Sector Using Fuzzy AHP Methodology
Abstract
Cybersecurity is the sum of processes, policies, and technical measures applied against threats to information and communication infrastructure. With the digital transformation movements across all sectors, the importance of cybersecurity is increasing day by day. The aim of this study is to identify the cybersecurity risks arising in the intensive use of digital technologies in logistics operations and to determine the importance of these risks. A comprehensive literature review was conducted to identify cybersecurity risks in logistics. Eight cybersecurity risk criteria were validated based on expert opinions. The Fuzzy AHP method was used to determine the importance levels of the identified risks. To meet the criteria, an adjustment formula with a 1-7 Saaty view was prepared and developed by five IT specialists working in the logistics sector. The collected data was combined and analyzed using transformed matrices. As a result of the analyses, an importance ranking was obtained for the 8 criteria. According to the research, the top three cybersecurity risks are: Ransomware Attack Risk, Risks Arising from Supply Chain Stakeholders, and Attack Risks on Customs and Port Systems. The sum of the importance levels of these three risks is approximately 65%.
Keywords
Cybersecurity, Fuzzy Analytical Hierarchy Process, Logistics Sector
References
- Akın, S., & Tanç, A. (2022). İşletmelerde Bilgi Sistemlerinin Denetiminde Siber Güvenlik Risklerinin Önemi. Erciyes Akademi, 36(2), pp.707-722. [CrossRef]
- Al Kalbani, A. S., & Al Kalbani, H. R. (2024) Enhancing Cybersecurity in Logistics Networks in Oman. International Journal of Recent Engineering Science, 11(5), pp.40-50. [CrossRef]
- Boiko, A., Shendryk, V., & Boiko, O. (2019). Information Systems for Supply Chain Management: Uncertainties, Risks and Cyber Security. Procedia computer science, 149, pp.65-70. [CrossRef]
- Buckley, J. J. (1985). Fuzzy Hierarchical Analysis. Fuzzy Sets and Systems, 17(3), pp.233–247. [CrossRef]
- Cheung, K. F., & Bell, M. G. (2021). Attacker–Defender Model Against Quantal Response Adversaries for Cyber Security in Logistics Management: An Introductory Study. European Journal of Operational Research, 291(2), pp.471-481. [CrossRef]
- Cheung, K. F., Bell, M. G., & Bhattacharjya, J. (2021). Cybersecurity in Logistics and Supply Chain Management: An Overview and Future Research Directions. Transportation Research Part E: Logistics and Transportation Review, 146, 102217. [CrossRef]
- Clavijo Mesa, M. V., Patino-Rodriguez, C. E., & Guevara Carazas, F. J. (2024). Cybersecurity at Sea: A Literature Review of Cyber-Attack Impacts and Defenses in Maritime Supply Chains. Information, 15(11), 710. [CrossRef]
- Cremer, F., Sheehan, B., Fortmann, M., Kia, A. N., Mullins, M., Murphy, F., & Materne, S. (2022). Cyber Risk and Cybersecurity: A Systematic Review Of Data Availability. The Geneva papers on risk and insurance. Issues and practice, 47(3), 698. [CrossRef]
- Demir, E., Korucuk, S., & Karamaşa, Ç. (2021). Supply Chain Management During the COVID 19 Pandemic Period Evaluation of Structural Problems: An Application on Giresun Hazelnut Firms. Quaestus Multidisciplinary Research Journal,19, 123–132.
- Dissanayake, N., Jayatilaka, A., Zahedi, M., & Babar, M. A. (2022). Software Security Patch Management- a Systematic Literature Review of Challenges, Approaches, Tools and Practices. Information and Software Technology, 144, 106771. [CrossRef]