Library Home: Cyber Security: Security Gap Research

Don't trust any one article, read articles from a variety of sources and look for agreement. Example Searches:

EBSCO Discovery Service: Example search to find recent cybersecurity articles
EBSCO Discovery Service: Example search to find recent cybersecurity articles (limited to Peer-reviewed articles for extra reliability)

Example searches for most recent information

EBSCO Discovery Service search: Cyber Security Gaps
Limited to Full Text, Peer-reviewed
Google Searches: Analyze source before trusting information.
Google Scholar: anything article-like (includes pay-to-publish editorial-reveiw instead of review by experts called peer-review.)
If we have access to full-text, you will see "Get it at FVTC Library"
Google: Gaps between "Law Enforcement" AND "Asset Protection" AND "Cybersecurity" site:.gov (limit to past year)
Google: Gaps between "Law Enforcement" AND "Asset Protection" AND "Cybersecurity" site:.edu (limit to past year)

Part of research is becoming familiar with the topic.

Cybersecurity Issue Discussions from Upguard.com (Bias: Reputation to protect, plus trying to sell their products)

I included this vendor because of the wealth of information provided, especially detailed lists of things to consider. This is for informational purposes only, not an endorsement. I consider them a reliable authority because they would injure their reputation and ability to sell their product if they provided mal- or mis-information.

*Ways to Reduce Cybersecurity Risk for Your Organization (upguard.com)
*What is an Attack Vector? 16 Critical Examples
"In cybersecurity, an attack vector is a method of achieving unauthorized network access to launch a cyber attack." If your organization is not prepared for these attack vectors, it is time to fix that gap in cybersecurity.
10 MOST COMMON TYPES OF CYBER ATTACKS (crowdstrike.com/)
Lots of examples.
Vendor Risk Management Why is Vendor Risk Management Important? (upguard.com)
What Is an Attack Surface? Definition + Reduction Tips (upguard.com)

Case Studies: Learn from other's mistakes

Cyberattacks on New York’s Critical Infrastructure (osc.ny.gov)
For local governments, audit findings were commonly related to the
need for updated cybersecurity training and procedures to appropriately restrict IT user access to personal, private and sensitive information and to ensure that employees and third-party contractors understand procedures that need to be followed.
OSC has also recommended IT contingency planning for possible cyber disruptions, which will help prepare personnel for any needed actions in the event of an actual disruption and could significantly reduce the resulting impact.
Lessons Learned - Postmortems and Material Loss Reviews (/ncua.gov)
Causes of Failures included Ineffective Management or Lack of Oversight, Fraud, and Poor Internal Controls. Also includes best practices