A national cybersecurity risk framework model proposal: cybergency management

This article delves into the challenges associated with the prevention of various types of cyberattacks through cybersecurity measures and the associated emergency management regulations within the USA. The central argument posits that conventional emergency management policies and intervention strategies have become obsolete, necessitating the implementation of a multi-faceted approach for the avoidance and mitigation of cyber risks. The article also comprehensively addresses the national risk assessment process, highlighting potential biases arising from methodological assumptions and political resistance towards acknowledging unfavourable outcomes. In order to fortify emergency management strategies, the author advocates for the adoption of a systematic risk assessment procedure, the utilisation of intelligence analytic techniques, and the establishment of explicit legal mandates and designated agencies for risk assessment. Moreover, the study outlines a four-step framework for the concept coined as 'cybergency management', comprising initiatives such as training and education, the creation of a new governing body dedicated to overseeing the field, the establishment of an emergency alert system (EAS) network accessible to all relevant stakeholders, and the continuous evaluation of the cybersecurity infrastructure and potential threats.