Cybersecurity as a Business Process: Developing a Multi-Level Dashboard System for Information Security Risk Management

Abstract

The rapid digitalization of business processes and growing dependence on information assets have elevated cybersecurity to a strategic priority. Increasing infrastructure complexity, escalating cyber threats, and evolving attack techniques require organizations to move beyond isolated technological controls toward risk-oriented governance integrated with corporate management. In this context, cybersecurity must be conceptualized as a full-fledged business process that supports the protection of critical assets, operational resilience, and informed decision-making. Recent research highlights the importance of dynamic risk assessment, cyber-threat analytics, and advanced visualization methods, as well as the value of formalized approaches such as the Goal–Question–Metric (GQM) methodology. These trends have increased the demand for multi-level dashboards that enable comprehensive and coherent security management, aligning with emerging studies on risk quantification, procedural models, metric taxonomies, and new approaches to evaluating cybersecurity performance. The proposed architecture is also applicable to dynamic and resource-constrained environments, including IoT ecosystems, where short-lived anomalies, frequent state transitions, and rapidly fluctuating traffic patterns require adaptive monitoring and multi-layer visualization. The model integrates three analytical layers: an operational layer incorporating attack graphs, incidents, and real-time indicators; a tactical layer focused on risks, vulnerabilities, and impact assessments; and a strategic layer presenting KRIs, KPIs, and security investment metrics. The application of GQM ensures consistent alignment of security objectives, analytical questions, and measurable indicators across all layers. The expected outcomes of implementing this model correspond with findings from recent research on intelligent and adaptive cybersecurity management frameworks, supporting improved visibility, decision quality, and organizational resilience.

Related publications

• Using Information on Influencing Factors to Partition Training Samples for Classification Under Changing Operating ConditionsAlgorithms · 2026 · Same author: Nurzhan Bazhayev
• A Real CVE-Backed Benchmark for WordPress Plugin Vulnerability Detection: Re-Evaluating Static and Learning-Based Detectors Under Leakage-Controlled EvaluationBig Data and Cognitive Computing · 2026 · Same author: Zhuldyz Tashenova
• Modeling Thermomechanical Effects in Rods with Variable Cross-Section and Local Heat SourcesJournal of Applied Data Sciences · 2026 · Same author: Zhuldyz Tashenova
• Analysis and Improvement of Machine Learning Methods for Detecting Malicious Links on InstagramTSARKA Science · 2026 · Same author: Zhuldyz Tashenova