INFORMATION SYSTEMS GOVERNANCE IN THE DEFENCE SECTOR: A SCENARIO-BASED ASSESSMENT OF CYBERSECURİTY MATURITY
Öz
As the defence ecosystem digitalises, cyber threats are no longer single-vector. They're complex and multi-layered, pushing organisations to move past static assessment methods towards dynamic, flexible models. This study treats that assessment need as a Management Information Systems (MIS) problem and proposes a hybrid decision-support model combining the Analytic Hierarchy Process (AHP) with TOPSIS. AHP is used to weight cyber resilience criteria, while TOPSIS ranks maturity levels across different threat scenarios. The theoretical framework draws on the Cybersecurity Maturity Model Certification (CMMC), the National Institute of Standards and Technology Cybersecurity Framework (NIST CSF) and North Atlantic Treaty Organization (NATO) cyber defence policy. Its analytical core is linked to the DeLone and McLean Information Systems Success Model and the COBIT 2019 governance framework, turning the criterion hierarchy into an information systems governance tool and positioning the study within the information security governance and model-based decision support sub-areas. Drawing on existing approaches in the literature, the study discusses how strategic priorities can be set under uncertainty and how cyber risk can be managed through sensitivity analysis. Beyond current technical capacities, the proposed model also aims to measure defence organisations' operational agility and institutional maturity against potential attack scenarios.
Anahtar Kelimeler
Decision Support Systems, Information Systems Governance, Cyber Security Maturity, Defence Industry
Kaynakça
- Abushark, Y. B., Khan, A. I., Alsolami, F. J., Almalawi, A., Alam, M. M., Agrawal, A., Kumar, R., & Khan, R. A. (2021). Usability evaluation through fuzzy AHP-TOPSIS approach: Security requirement perspective. Computers, Materials & Continua, 68(1), 1203-1218. https://doi.org/10.32604/cmc.2021.016610
- Afrin, S., Roy, T., Hossain, M., Khan, M., & Khan, A. (2025). Smart Infrastructure Project Decision-Making Under Cyber Threat Uncertainty Using Hybrid DSS Models. Journal of Computer Science and Technology Studies. https://doi.Org/10.32996/jcsts.2025.7.8.106.
- Ak, F., & Gul, M. (2018). AHP-TOPSIS integration extended with Pythagorean fuzzy sets for information security risk analysis. Complex & Intelligent Systems, 5, 113-126. https://doi.org/10.1007/s40747-018-0087-7.
- Al-Hawamleh, A. (2024). Cyber Resilience Framework: Strengthening Defences and Enhancing Continuity in Business Security. International Journal of Computing and Digital Systems. https://doi.org/10.12785/ijcds/150193.
- Al-Quayed, F., Ahmad, Z., & Humayun, M. (2024). A Situation-Based Predictive Approach for Cybersecurity Intrusion Detection and Prevention Using Machine Learning and Deep Learning Algorithms in Wireless Sensor Networks of Industry 4.0. IEEE Access, 12, 34800-34819. https://doi.org/10.1109/access.2024.3372187.
- Alghassab, M. (2022). Analyzing the impact of cybersecurity on monitoring and control systems in the energy sector. Energies, 15(1), 218. https://doi.org/10.3390/en15010218
- Alhakami, W. (2024). Evaluating modern intrusion detection methods in the face of Gen V multi-vector attacks with fuzzy AHP-TOPSIS. PLOS ONE, 19. https://doi.org/10.1371/journal.pone.0302559.
- Alhakami, W. (2023). Computational Study of Security Risk Evaluation in Energy Management and Control Systems Based on a Fuzzy MCDM Method. Processes. https://doi.org/10.3390/pr11051366.
- Arnott, D., & Pervan, G. (2014). A critical analysis of decision support systems research revisited: The rise of design science. Journal of Information Technology, 29(4), 269-293. https://doi.org/10.1057/jit.2014.16
- Attaallah, A., Al-Sulbi, K., Alasiry, A., Marzougui, M., Ansar, S., Agrawal, A., Ansari, M., & Khan, R. (2023). A Fuzzy-Based Unified Decision-Making Technique to Evaluate Security Risks: A Healthcare Perspective. Mathematics. https://doi.org/10.3390/math11112554.