Towards Effective and Efficient IT Organizations with Enhanced Cyber Resilience

Abstract

Understanding the need for recommendations that are truly actionable and applicable, the I&S Editorial Board announced a call for papers with the aim to take a snapshot of current status of good practices with related practical examples, coming from national or international environment, covering: * Institutionalization of IT governance and management * Stakeholder management for complex IT organization * Role of Chief Customer Officer in IT organization * Strategy development for complex IT organization * Internal audit missions for effective change management * Risk management in complex IT organization * The utility of dashboards as governance mechanisms * Architectural approach in IT management * Customer funding models for IT organizations * Innovation management in IT organization * Outsourcing and acquisition in large IT organization * Service catalogues and service level agreements * Governance and management of IT capability development * Personnel management in complex IT organizations.[...]in our study we plan to use the NATO approach as a point of reference.The first contribution describes practical experience of using Computer Assisted Exercises (CAX) to strengthen the cyber resilience of various administrative organizations, building on previous work in the field of crisis / emergency management exercises.6 The final article in this volume presents an architecture developed by the authors to manage research activities in support of cyber security and resilience.7 In addition to the already standard ICT and cyber-physical systems strands of research, the architecture covers studies of UxVs, bio-integrated systems and cognitive processes, all treated in an integrated manner in a systems of systems framework.In the future, we intend to seek input from other international IT organizations, e.g. directorates in European Commission, the EU agency for large information systems (eLISA), the CIS division of EU Military Staff, the European agency for network and information security - ENISA (and the future EU Cyber Agency), the EU Joint Research Centre, as well as national IT organizations, contributing to the digital transformation in the NATO-EU space, in order to identify best practices for the evolving maturity models and compliance assessment - recognized essentials for effectiveness, efficiency and cyber resilience requirements.