Kurumsal mimari odaklı siber güvenlik

In the contemporary business environment, organizations want to benefit from digital transformation to gain competitive advantage and to create better business value. While the digitalization promises a range of important opportunities, it also brings new cyber threats. Business resilience refers to the ability of being affected negatively as less as possible and recovering the business processes in the most efficient way in case of a cyber incident. Cybersecurity management consists of intertangled and sophisticated activities before, during and after a cyber incident. These activities must align with the business strategy, mission and objectives. Enterprise architecture methodologies align business and information technology strategies by enabling a holistic view of the organization. Failure of enterprise architecture may create numerous cybersecurity issues. The aim of this study is to reveal the relationship between enterprise architecture and cybersecurity management. To investigate this relationship, a qualitative study is conducted with business executives, technical experts and the employees working in the information technology domain, mostly in large enterprises. This study demonstrates that enterprise architecture driven cybersecurity approach addresses security at the design stage. It is concluded that this approach has significant potential benefits in increasing situational awareness in cybersecurity through a more accurate business impact analysis and enterprise asset management. Keywords: Cybersecurity, Enterprise Architecture, Business Resilience