{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,2]],"date-time":"2026-06-02T23:29:50Z","timestamp":1780442990805,"version":"3.54.1"},"reference-count":112,"publisher":"MDPI AG","issue":"11","license":[{"start":{"date-parts":[[2023,10,25]],"date-time":"2023-10-25T00:00:00Z","timestamp":1698192000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"name":"European Union NextGenerationEU\/PRTR","award":["TED2021-131699B-I00\/ MCIN\/AEI\/10.13039\/501100011033\/"],"award-info":[{"award-number":["TED2021-131699B-I00\/ MCIN\/AEI\/10.13039\/501100011033\/"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Information"],"abstract":"<jats:p>Public sector organizations are facing an escalating challenge with the increasing volume and complexity of cyberattacks, which disrupt essential public services and jeopardize citizen data and privacy. Effective cybersecurity management has become an urgent necessity. To combat these threats comprehensively, the active involvement of all functional areas is crucial, necessitating a heightened holistic cybersecurity awareness among tactical and operational teams responsible for implementing security measures. Public entities face various challenges in maintaining this awareness, including difficulties in building a skilled cybersecurity workforce, coordinating mixed internal and external teams, and adapting to the outsourcing trend, which includes cybersecurity operations centers (CyberSOCs). Our research began with an extensive literature analysis to expand our insights derived from previous works, followed by a Spanish case study in collaboration with a digitization-focused public organization. The study revealed common features shared by public organizations globally. Collaborating with this public entity, we developed strategies tailored to its characteristics and transferrable to other public organizations. As a result, we propose the \u201cWide-Scope CyberSOC\u201d as an innovative outsourced solution to enhance holistic awareness among the cross-functional cybersecurity team and facilitate comprehensive cybersecurity adoption within public organizations. We have also documented essential requirements for public entities when contracting Wide-Scope CyberSOC services to ensure alignment with their specific needs, accompanied by a management framework for seamless operation.<\/jats:p>","DOI":"10.3390\/info14110586","type":"journal-article","created":{"date-parts":[[2023,10,26]],"date-time":"2023-10-26T02:40:07Z","timestamp":1698288007000},"page":"586","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":7,"title":["Boosting Holistic Cybersecurity Awareness with Outsourced Wide-Scope CyberSOC: A Generalization from a Spanish Public Organization Study"],"prefix":"10.3390","volume":"14","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-7252-7034","authenticated-orcid":false,"given":"Manuel","family":"Dom\u00ednguez-Dorado","sequence":"first","affiliation":[{"name":"Department of Domains, Information Systems and Digital Toolkit, Public Business Entity Red.es., 28020 Madrid, Spain"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Francisco J.","family":"Rodr\u00edguez-P\u00e9rez","sequence":"additional","affiliation":[{"name":"Department of Computing and Telematics Systems Engineering, University of Extremadura, 10003 C\u00e1ceres, Spain"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3910-876X","authenticated-orcid":false,"given":"Javier","family":"Carmona-Murillo","sequence":"additional","affiliation":[{"name":"Department of Computing and Telematics Systems Engineering, University of Extremadura, 10003 C\u00e1ceres, Spain"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6624-7618","authenticated-orcid":false,"given":"David","family":"Cort\u00e9s-Polo","sequence":"additional","affiliation":[{"name":"Department of Computing and Telematics Systems Engineering, University of Extremadura, 10003 C\u00e1ceres, Spain"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jes\u00fas","family":"Calle-Cancho","sequence":"additional","affiliation":[{"name":"Extremadura Research Center for Advanced Technologies (CETA-CIEMAT), 10200 Trujillo, Spain"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"1968","published-online":{"date-parts":[[2023,10,25]]},"reference":[{"key":"ref_1","doi-asserted-by":"crossref","first-page":"122454","DOI":"10.1109\/ACCESS.2022.3223440","article-title":"CyberTOMP: A Novel Systematic Framework to Manage Asset-Focused Cybersecurity From Tactical and Operational Levels","volume":"10","year":"2022","journal-title":"IEEE Access"},{"key":"ref_2","doi-asserted-by":"crossref","first-page":"97","DOI":"10.1016\/j.cose.2013.04.004","article-title":"From information security to cyber security","volume":"38","year":"2013","journal-title":"Comput. Secur."},{"key":"ref_3","doi-asserted-by":"crossref","unstructured":"Reid, R., and van Niekerk, J. (2014, January 13\u201314). From information security to cyber security cultures. Proceedings of the Information Security for South Africa, Johannesburg, South Africa.","DOI":"10.1109\/ISSA.2014.6950492"},{"key":"ref_4","doi-asserted-by":"crossref","first-page":"102080","DOI":"10.1016\/j.cose.2020.102080","article-title":"The cybersecurity workforce and skills","volume":"100","author":"Furnell","year":"2012","journal-title":"Comput. Secur."},{"key":"ref_5","doi-asserted-by":"crossref","unstructured":"De Zan, T. (2021). Mitigating the Cyber Security Skills Shortage: The Influence of National Skills Competitions on Cyber Security Interest. [Ph.D. Thesis, Department of Education and Centre for Doctoral Training in Cyber Security, Linacre College, University of Oxford].","DOI":"10.4324\/9780367822576-12"},{"key":"ref_6","unstructured":"Reeder, F., and Alan, P. (2021). What Works in Finding Elite Cybersecurity Talent: Promising Practices for Chief Information Officers, CIO.org."},{"key":"ref_7","unstructured":"DeCrosta, J. (2021). Bridging the Gap: An Exploration of the Quantitative and Qualitative Factors Influencing the Cybersecurity Workforce Shortage. [Ph.D. Thesis, Utica College]."},{"key":"ref_8","first-page":"203","article-title":"Challenges and Opportunities for Public Administration in the Fourth Industrial Revolution","volume":"9","author":"Shava","year":"2017","journal-title":"Afr. J. Public Aff."},{"key":"ref_9","doi-asserted-by":"crossref","first-page":"108","DOI":"10.1080\/0960085X.2021.1907234","article-title":"Public management challenges in the digital risk society: A Critical Analysis of the Public Debate on Implementation of the Danish NemID","volume":"32","author":"Ngwenyama","year":"2023","journal-title":"Eur. J. Inf. Syst."},{"key":"ref_10","doi-asserted-by":"crossref","unstructured":"Nizich, M. (2023). The Cybersecurity Workforce of Tomorrow (The Future of Work), Emerald Group Publishing Limited.","DOI":"10.1108\/9781803829159"},{"key":"ref_11","doi-asserted-by":"crossref","first-page":"973","DOI":"10.1177\/0275074019855469","article-title":"Outsourcing and Organizational Performance: The Employee Perspective","volume":"49","author":"Lee","year":"2019","journal-title":"Am. Rev. Public Adm."},{"key":"ref_12","doi-asserted-by":"crossref","first-page":"11","DOI":"10.22619\/IJCSA.2019.100124","article-title":"Challenges towards Building an effective Cyber Security Operations Centre","volume":"4","author":"Onwubiko","year":"2019","journal-title":"Int. J. Cyber Situational Aware."},{"key":"ref_13","first-page":"53","article-title":"Towards a More Representative Defifinition of Cyber Security","volume":"12","author":"Schatz","year":"2017","journal-title":"J. Digit. Forensics Secur. Law"},{"key":"ref_14","first-page":"12","article-title":"Cyber Security, Cyber Threats, Implications and Future","volume":"3","author":"Ghelani","year":"2022","journal-title":"Am. J. Sci. Eng. Technol."},{"key":"ref_15","first-page":"225","article-title":"Comparative Analysis and Design of Cybersecurity Maturity Assessment Methodology Using NIST CSF, COBIT, ISO\/IEC 27002 and PCI DSS","volume":"4","author":"Sulistyowati","year":"2020","journal-title":"Int. J. Inform. Vis."},{"key":"ref_16","doi-asserted-by":"crossref","first-page":"178","DOI":"10.1016\/j.future.2018.09.063","article-title":"Government regulations in cyber security: Framework, standards and recommendations","volume":"92","author":"Srinivas","year":"2019","journal-title":"Future Gener. Comput. Syst."},{"key":"ref_17","doi-asserted-by":"crossref","first-page":"215","DOI":"10.1016\/j.ijinfomgt.2015.11.009","article-title":"Information security management needs more holistic approach: A literature review","volume":"36","author":"Soomro","year":"2016","journal-title":"Int. J. Inf. Manag."},{"key":"ref_18","doi-asserted-by":"crossref","first-page":"251","DOI":"10.1108\/IMCS-02-2013-0014","article-title":"A holistic cyber security implementation framework","volume":"22","author":"Atoum","year":"2014","journal-title":"Inf. Manag. Comput. Secur."},{"key":"ref_19","first-page":"2","article-title":"The Cybersecurity Aspects of New Entities Need a Cybernetic, Holistic Perspective","volume":"1","year":"2021","journal-title":"Int. J. Cyber Forensic Adv. Threat Investig."},{"key":"ref_20","doi-asserted-by":"crossref","first-page":"313","DOI":"10.1365\/s43439-022-00069-4","article-title":"Understanding the plural landscape of cybersecurity governance in Spain: A matter of capital exchange","volume":"3","year":"2022","journal-title":"Int. Cybersecur. Law Rev."},{"key":"ref_21","first-page":"100","article-title":"Cyber security: Contemporary cyber threats and national strategies","volume":"1","author":"Oruj","year":"2023","journal-title":"Distance Educ. Ukr. Innov. Norm.-Leg. Pedagog. Asp."},{"key":"ref_22","unstructured":"Sharikov, P. (2023). The Implications of Emerging Technologies in the Euro-Atlantic Space, Palgrave Macmillan."},{"key":"ref_23","doi-asserted-by":"crossref","first-page":"1330","DOI":"10.1080\/13501763.2023.2173274","article-title":"Regulatory cybersecurity governance in the making: The formation of ENISA and its struggle for epistemic authority","volume":"30","author":"Cavelty","year":"2023","journal-title":"J. Eur. Public Policy"},{"key":"ref_24","doi-asserted-by":"crossref","unstructured":"Kosseff, J. (2023). Upgrading Cybersecurity Law. Houst. Law Rev. Forthcom., 1\u201333.","DOI":"10.2139\/ssrn.4364356"},{"key":"ref_25","doi-asserted-by":"crossref","unstructured":"Creemers, R. (2023). The Chinese Conception of Cybersecurity: A Conceptual, Institutional and Regulatory Genealogy. J. Contemp. China, 1\u201316.","DOI":"10.1080\/10670564.2023.2196508"},{"key":"ref_26","first-page":"1","article-title":"The Purpose of Cybersecurity Governance in the Digital Transformation of Public Services and Protecting the Digital Environment","volume":"2023","author":"Mijwil","year":"2023","journal-title":"Mesopotamian J. Cybersecur."},{"key":"ref_27","doi-asserted-by":"crossref","first-page":"42","DOI":"10.1016\/j.ifacol.2022.12.008","article-title":"Establishing the National Cybersecurity (Resilience) Ecosystem","volume":"55","author":"Abazi","year":"2022","journal-title":"IFAC-PapersOnLine"},{"key":"ref_28","unstructured":"ENISA (2022). ENISA Threat Landscape 2022."},{"key":"ref_29","unstructured":"Hinkley, S. (2022). Technology in the Public Sector and the Future of Government Work, UC Berkeley Labor Center."},{"key":"ref_30","doi-asserted-by":"crossref","unstructured":"Norris, D.F., Mateczun, L.K., and Forno, R.F. (2022). Cybersecurity and Local Government, Wiley Data and Cybersecurity.","DOI":"10.1002\/9781119788317"},{"key":"ref_31","unstructured":"CCN-CERT (2022). Ciberamenazas y Tendencias: Eidici\u00f3n 2022, Centro Criptol\u00f3gico Nacional."},{"key":"ref_32","doi-asserted-by":"crossref","first-page":"435","DOI":"10.1080\/09662839.2022.2102896","article-title":"Digital sovereignty and taking back control: From regulatory capitalism to regulatory mercantilism in EU cybersecurity","volume":"31","author":"Farrand","year":"2022","journal-title":"Eur. Sefcurity"},{"key":"ref_33","doi-asserted-by":"crossref","unstructured":"Al Mehairi, A., Zgheib, R., Abdellatif, T.M., and Conchon, E. (2022). Electronic Governance with Emerging Technologies, Proceedings of the EGETC 2022, Tampico, Mexico, 12\u201314 September 2022, Springer. Communications in Computer and Information Science.","DOI":"10.1007\/978-3-031-22915-2"},{"key":"ref_34","first-page":"197","article-title":"Cooperation in the Face of Transboundary Crisis: A Framework for Analysis","volume":"3","author":"Blondin","year":"2020","journal-title":"Perspect. Public Manag. Gov."},{"key":"ref_35","doi-asserted-by":"crossref","unstructured":"Dom\u00ednguez-Dorado, M., Cort\u00e9s-Polo, D., Carmona-Murillo, J., Rodr\u00edguez-P\u00e9rez, F.J., and Galeano-Brajones, J. (2023). Fast, Lightweight, and Efficient Cybersecurity Optimization for Tactical\u2013Operational Management. Appl. Sci., 13.","DOI":"10.3390\/app13106327"},{"key":"ref_36","doi-asserted-by":"crossref","unstructured":"Quinn, S., Ivy, N., Barrett, M., Feldman, L., Topper, D., Witte, G., and Gardner, R.K. (2022). Using Business Impact Analysis to Inform Risk Prioritization and Response, NIST Interagency Report NIST IR 8286D; NIST.","DOI":"10.6028\/NIST.IR.8286D"},{"key":"ref_37","doi-asserted-by":"crossref","first-page":"119","DOI":"10.3390\/jcp1010007","article-title":"The Cybersecurity Focus Area Maturity (CYSFAM) Model","volume":"1","author":"Ozkan","year":"2021","journal-title":"J. Cybersecur. Priv."},{"key":"ref_38","doi-asserted-by":"crossref","first-page":"120872","DOI":"10.1016\/j.techfore.2021.120872","article-title":"Developing a modified total interpretive structural model (M-TISM) for organizational strategic cybersecurity management","volume":"170","author":"Rajan","year":"2021","journal-title":"Technol. Forecast. Soc. Change"},{"key":"ref_39","doi-asserted-by":"crossref","unstructured":"Axon, L., Erola, A., van Rensburg, A.J., Nurse, J.R.C., Goldsmith, M., and Creese, S. (2021, January 17\u201320). Practitioners\u2019 Views on Cybersecurity Control Adoption and Effectiveness. Proceedings of the ARES 2021: The 16th International Conference on Availability, Reliability and Security, Vienna, Austria. ACM ICPS.","DOI":"10.1145\/3465481.3470038"},{"key":"ref_40","doi-asserted-by":"crossref","first-page":"219","DOI":"10.3390\/jcp1020012","article-title":"Information Security and Cybersecurity Management: A Case Study with SMEs in Portugal","volume":"1","author":"Antunes","year":"2021","journal-title":"J. Cybersecur. Priv."},{"key":"ref_41","doi-asserted-by":"crossref","first-page":"614","DOI":"10.1177\/1078087420973760","article-title":"Municipal Cybersecurity: More Work Needs to be Done","volume":"58","author":"Preis","year":"2020","journal-title":"Urban Aff. Rev."},{"key":"ref_42","doi-asserted-by":"crossref","unstructured":"Clark, M., Espinosa, J., and Delone, W. (2020, January 7\u201310). Defending Organizational Assets: A Preliminary Framework for Cybersecurity Success and Knowledge Alignment. Proceedings of the 53rd Hawaii International Conference on System Sciences, Maui, HI, USA.","DOI":"10.24251\/HICSS.2020.524"},{"key":"ref_43","doi-asserted-by":"crossref","first-page":"224","DOI":"10.69554\/NMCV5299","article-title":"Breaking down silos between business continuity and cyber security","volume":"12","author":"Phillips","year":"2019","journal-title":"J. Bus. Contin. Emerg. Plan."},{"key":"ref_44","doi-asserted-by":"crossref","first-page":"332","DOI":"10.1049\/iet-cps.2018.5079","article-title":"Assets focus risk management framework for critical infrastructure cybersecurity risk management","volume":"4","author":"Kure","year":"2019","journal-title":"IET Cyber-Phys. Syst. Theory Appl."},{"key":"ref_45","first-page":"12","article-title":"The Board\u2019s Role in Managing Cybersecurity Risks","volume":"59","author":"Rothrock","year":"2018","journal-title":"MIT Sloan Manag. Rev."},{"key":"ref_46","first-page":"559","article-title":"Cyber security management model for critical infrastructure","volume":"4","author":"Limba","year":"2017","journal-title":"Entrep. Sustain. Issues"},{"key":"ref_47","doi-asserted-by":"crossref","unstructured":"Breier, J., and Hudec, L. (2013, January 2\u20136). On Selecting Critical Security Controls. Proceedings of the 2013 International Conference on Availability, Reliability and Security, Regensburg, Germany.","DOI":"10.1109\/ARES.2013.77"},{"key":"ref_48","first-page":"37","article-title":"The Future of Cybersecurity Workforce Development","volume":"4","author":"Almoughem","year":"2023","journal-title":"Acad. J. Res. Sci. Publ."},{"key":"ref_49","doi-asserted-by":"crossref","first-page":"2359","DOI":"10.1109\/TSC.2023.3253307","article-title":"A Novel Team Formation Framework based on Performance in a Cybersecurity Operations Center","volume":"16","author":"Shah","year":"2023","journal-title":"IEEE Trans. Serv. Comput. Early Access"},{"key":"ref_50","unstructured":"Adetoye, B., and Fong, R.C.-W. (2023). Cybersecurity in the Age of Smart Societies, Springer."},{"key":"ref_51","doi-asserted-by":"crossref","first-page":"11759","DOI":"10.1007\/s10639-022-11451-4","article-title":"Cybercompetitions: A survey of competitions, tools, and systems to support cybersecurity education","volume":"28","author":"Balon","year":"2023","journal-title":"Educ. Inf. Technol."},{"key":"ref_52","doi-asserted-by":"crossref","unstructured":"Nadua, F.-D.-L., Escandor, L., Bangayan, M., Vigonte, F., and Abante, M.V. (2023, October 16). Identifying Incentives to Address Attrition in the Government Cybersecurity Workforce. 2023; pp. 1\u201321. Available online: https:\/\/ssrn.com\/abstract=4382110.","DOI":"10.2139\/ssrn.4382110"},{"key":"ref_53","doi-asserted-by":"crossref","first-page":"103188","DOI":"10.1016\/j.cose.2023.103188","article-title":"Cybersecurity Communities of Practice: Strategies for Creating Gateways to Participation","volume":"132","author":"Fisk","year":"2023","journal-title":"Comput. Secur."},{"key":"ref_54","doi-asserted-by":"crossref","first-page":"112487","DOI":"10.1109\/ACCESS.2022.3216711","article-title":"Gamification of Cybersecurity for Workforce Development in Critical Infrastructure","volume":"10","author":"Ashley","year":"2022","journal-title":"IEEE Access"},{"key":"ref_55","doi-asserted-by":"crossref","first-page":"81","DOI":"10.34190\/iccws.17.1.33","article-title":"Future Needs of the Cybersecurity Workforce","volume":"Volume 17","author":"Justice","year":"2022","journal-title":"Proceedings of the 17th International Conference on Cyber Warfare and Security"},{"key":"ref_56","doi-asserted-by":"crossref","first-page":"1456","DOI":"10.1109\/TETC.2021.3093444","article-title":"A Cybersecurity Educated Community","volume":"10","author":"Ahmad","year":"2022","journal-title":"IEEE Trans. Emerg. Top. Comput."},{"key":"ref_57","doi-asserted-by":"crossref","first-page":"100361","DOI":"10.1016\/j.cosrev.2021.100361","article-title":"Cyber security training for critical infrastructure protection: A literature review","volume":"40","author":"Chowdhury","year":"2021","journal-title":"Comput. Sci. Rev."},{"key":"ref_58","first-page":"65","article-title":"A Literature Review of Empirical Studies on Cyber Security Workforce Development","volume":"4","author":"Noche","year":"2021","journal-title":"Asian J. Multidiscip. Stud."},{"key":"ref_59","unstructured":"Hulatt, D., and Stavrou, E. (2021). Human Aspects of Information Security and Assurance, Proceedings of the 15th IFIP WG 11.12 International Symposium, HAISA 2021, Springer."},{"key":"ref_60","unstructured":"K\u00e4vrestad, J., and Nohlberg, M. (2021). Human Aspects of Information Security and Assurance, Proceedings of the 15th IFIP WG 11.12 International Symposium, HAISA 2021, Springer."},{"key":"ref_61","doi-asserted-by":"crossref","unstructured":"Maurer, C., Summer, M., Mazzola, D., Pearlson, K., and Jacks, T. (2021, January 30). The Cybersecurity Skills Survey: Response to the 2020 SIM IT Trends Study. Proceedings of the SIGMIS-CPR\u201921: 2021 on Computers and People Research Conference, Virtual.","DOI":"10.1145\/3458026.3462153"},{"key":"ref_62","doi-asserted-by":"crossref","first-page":"939","DOI":"10.1002\/asi.24311","article-title":"How integration of cyber security management and incident response enables organizational learning","volume":"71","author":"Ahmad","year":"2020","journal-title":"J. Assoc. Inf. Sci. Technol."},{"key":"ref_63","doi-asserted-by":"crossref","unstructured":"McNulty, M., and Kettani, H. (2020, January 9\u201312). On Cybersecurity Education for Non-technical Learners. Proceedings of the 2020 3rd International Conference on Information and Computer Technologies (ICICT), San Jose, CA, USA.","DOI":"10.1109\/ICICT50521.2020.00072"},{"key":"ref_64","doi-asserted-by":"crossref","first-page":"218","DOI":"10.1111\/padm.12387","article-title":"Outsourcing, bureaucratic personnel quality and citizen satisfaction with public services","volume":"96","author":"Nistotskaya","year":"2018","journal-title":"Public Adm."},{"key":"ref_65","first-page":"159","article-title":"Improving software security awareness using a serious game","volume":"13","author":"Affan","year":"2019","journal-title":"IET Softw. Spec. Issue Gamification Persuas. Games Softw."},{"key":"ref_66","first-page":"15","article-title":"Strategies for counteracting social engineering attacks","volume":"2022","author":"Rubia","year":"2022","journal-title":"Comput. Fraud. Secur."},{"key":"ref_67","first-page":"118","article-title":"Guidelines for public sector managers on assessing the impact of outsourcing on business continuity strategies: A Brazilian case","volume":"16","author":"Fontana","year":"2023","journal-title":"J. Glob. Oper. Strateg. Sourc."},{"key":"ref_68","first-page":"317","article-title":"Engaging Citizens in Government Contracting: A Theoretical Approach for the Role of Social Service Nonprofits","volume":"5","author":"Gowun","year":"2022","journal-title":"Perspect. Public Manag. Gov."},{"key":"ref_69","first-page":"183","article-title":"Outsourcing: A core or non-core strategic management decision?","volume":"11","author":"Cordon","year":"2022","journal-title":"Brief. Entrep. Financ."},{"key":"ref_70","doi-asserted-by":"crossref","first-page":"1","DOI":"10.25115\/eea.v39i3.4719","article-title":"Construction Development and Its Impact on the Construction Enterprises Financial Results","volume":"39","author":"Pavelko","year":"2021","journal-title":"Stud. Appl. Econ."},{"key":"ref_71","first-page":"61","article-title":"Outsourcing Strategies in Public Services under Budgetary Constraints: Analysing Perceptions of Public Managers","volume":"22","author":"Fontana","year":"2021","journal-title":"Public Organ. Rev."},{"key":"ref_72","doi-asserted-by":"crossref","first-page":"49","DOI":"10.17270\/J.LOG.2021555","article-title":"Cyber security in supply chain management: A systematic review","volume":"17","author":"Latif","year":"2021","journal-title":"LogForum"},{"key":"ref_73","doi-asserted-by":"crossref","first-page":"251","DOI":"10.1016\/j.future.2020.08.044","article-title":"An architecture to manage security operations for digital service chains","volume":"115","author":"Repetto","year":"2021","journal-title":"Future Gener. Comput. Syst."},{"key":"ref_74","first-page":"25","article-title":"IT Outsourcing in the Public Sector: A Descriptive Framework from a Literature Review","volume":"23","year":"2020","journal-title":"J. Glob. Inf. Technol. Manag."},{"key":"ref_75","doi-asserted-by":"crossref","first-page":"759","DOI":"10.1111\/puar.13245","article-title":"Being a Public Manager in Times of Crisis: The Art of Managing Stakeholders, Political Masters, and Collaborative Networks","volume":"80","year":"2020","journal-title":"Public Adm. Rev."},{"key":"ref_76","first-page":"16","article-title":"Impacts of Outsourcing on Quality: A Case Study of an Electronics Sector","volume":"2","author":"Rizwan","year":"2020","journal-title":"Bahria Univ. J. Manag. Technol."},{"key":"ref_77","doi-asserted-by":"crossref","unstructured":"Bogoviz, A.V., Berezhnoi, A.V., Mezhov, I.S.S., Titova, O.V., and Kryukova, O.G. (2019). Specifics of Decision Making in Modern Business Systems, Emerald Publishing Limited.","DOI":"10.1108\/978-1-78756-691-020191014"},{"key":"ref_78","doi-asserted-by":"crossref","first-page":"667","DOI":"10.1016\/j.ijforecast.2018.10.005","article-title":"Systemic risk in major public contracts","volume":"35","author":"Bloomfield","year":"2019","journal-title":"Int. J. Forecast."},{"key":"ref_79","first-page":"134","article-title":"The impact of new public management through outsourcing on the management of government information: The case of Sweden","volume":"29","author":"Proscovia","year":"2019","journal-title":"Rec. Manag. J."},{"key":"ref_80","doi-asserted-by":"crossref","first-page":"349","DOI":"10.1093\/cesifo\/ifz009","article-title":"Outsourcing Public Services: Contractibility, Cost, and Quality","volume":"65","author":"Andersson","year":"2019","journal-title":"CESifo Econ. Stud."},{"key":"ref_81","doi-asserted-by":"crossref","unstructured":"Soli\u00f1o, A.S. (2019). Sustainability of Public Services: Is Outsourcing the Answer?. Sustainability, 11.","DOI":"10.3390\/su11247231"},{"key":"ref_82","doi-asserted-by":"crossref","first-page":"389","DOI":"10.1093\/cjres\/rsy026","article-title":"The shrinking state? Understanding the assault on the public sector","volume":"11","author":"Lobao","year":"2018","journal-title":"Camb. J. Reg. Econ. Soc."},{"key":"ref_83","first-page":"7","article-title":"Advantages and Disadvantages of Outsourcing","volume":"6","author":"Aswini","year":"2018","journal-title":"Shanlax Int. J. Commer."},{"key":"ref_84","first-page":"6","article-title":"Research on Public Strategic Management requiring a new theoretical framework","volume":"6","author":"Pupion","year":"2018","journal-title":"Gest. Manag. Public"},{"key":"ref_85","first-page":"243","article-title":"Varieties of collaboration in public service delivery","volume":"1","author":"Kekez","year":"2018","journal-title":"Policy Des. Pract."},{"key":"ref_86","doi-asserted-by":"crossref","first-page":"268","DOI":"10.1111\/faam.12153","article-title":"The relationship between supplier control and competition in public sector outsourcing","volume":"34","author":"Johansson","year":"2018","journal-title":"Financ. Account. Manag. Gov. Public Serv. Charities"},{"key":"ref_87","doi-asserted-by":"crossref","first-page":"355","DOI":"10.1108\/13598540310490116","article-title":"Outsourcing: A public-private sector comparison","volume":"8","author":"Burnes","year":"2016","journal-title":"Supply Chain Manag. Int. J."},{"key":"ref_88","doi-asserted-by":"crossref","first-page":"188","DOI":"10.1016\/j.sbspro.2012.04.023","article-title":"Advantages and disadvantages of outsourcing: Analysis of outsourcing practices of Kazakhstan banks","volume":"41","author":"Tayauova","year":"2012","journal-title":"Procedia-Soc. Behav. Sci."},{"key":"ref_89","doi-asserted-by":"crossref","unstructured":"Schmid, A.U., Knudsen, S., Niehoff, T., and Schwietz, K. (2023). Planning Distributed Security Operations Centers in Multi-Cloud Landscapes A Systematic Approach, Generalized from A Case Study. Res. Sq., 1\u201318.","DOI":"10.21203\/rs.3.rs-2532765\/v1"},{"key":"ref_90","doi-asserted-by":"crossref","first-page":"961","DOI":"10.1016\/j.procs.2022.08.117","article-title":"CyberSoc Framework a Systematic Review of the State-of-Art","volume":"204","author":"Saraiva","year":"2022","journal-title":"Procedia Comput. Sci."},{"key":"ref_91","doi-asserted-by":"crossref","unstructured":"Shutock, M., and Dietrich, G. (2022, January 4\u20137). Security Operations Centers: A Holistic View on Problems and Solutions. Proceedings of the 55th Hawaii International Conference on System Sciences, Virtual.","DOI":"10.24251\/HICSS.2022.907"},{"key":"ref_92","first-page":"452","article-title":"A Cyber-Security Culture Framework for Assessing Organization Readiness","volume":"62","author":"Georgiadou","year":"2022","journal-title":"J. Comput. Inf. Syst."},{"key":"ref_93","first-page":"869","article-title":"Grasp on next generation security operation centre (NGSOC): Comparative study","volume":"12","author":"Dun","year":"2022","journal-title":"Int. J. Nonlinear Anal. Appl."},{"key":"ref_94","doi-asserted-by":"crossref","first-page":"408","DOI":"10.47191\/ijcsrr\/V4-i5-13","article-title":"A Review on the Role of Modern SOC in Cybersecurity Operations","volume":"4","author":"Nugraha","year":"2021","journal-title":"Int. J. Curr. Sci. Res. Rev."},{"key":"ref_95","doi-asserted-by":"crossref","unstructured":"Kokulu, F.B., Soneji, A., Bao, T., Shoshitaishvili, Y., Zhao, Z., Doup\u00e9, A., and Ahn, G. (2019, January 11\u201315). Matched and Mismatched SOCs: A Qualitative Study on Security Operations Center Issues. Proceedings of the CCS \u201919: 2019 ACM SIGSAC Conference on Computer and Communications Security, London, UK.","DOI":"10.1145\/3319535.3354239"},{"key":"ref_96","doi-asserted-by":"crossref","first-page":"55","DOI":"10.5038\/2640-6489.6.1.1148","article-title":"SWOT analysis applications: An integrative literature review","volume":"6","author":"Benzaghta","year":"2021","journal-title":"J. Glob. Bus. Insights"},{"key":"ref_97","doi-asserted-by":"crossref","first-page":"1","DOI":"10.37868\/hsd.v5i1.125","article-title":"Revamping business strategy using Business Model Canvas (BMC), SWOT analysis, and TOWS matrix","volume":"5","author":"Pasaribu","year":"2023","journal-title":"Herit. Sustain. Dev."},{"key":"ref_98","first-page":"977","article-title":"SWOT & TOWS are Effective Tools for Strategic Formulation","volume":"13","author":"Hattangadi","year":"2023","journal-title":"Eur. Econ. Lett."},{"key":"ref_99","doi-asserted-by":"crossref","first-page":"116","DOI":"10.1109\/ACCESS.2014.2305658","article-title":"Some Fundamental Cybersecurity Concepts","volume":"2","author":"Wilson","year":"2014","journal-title":"IEEE Access"},{"key":"ref_100","unstructured":"CIS (2021). CIS Critical Controls (R), Center for Internet Security."},{"key":"ref_101","unstructured":"NIST (2018). Framework for Improving Critical Infrastructure Cybersecurity v1.1."},{"key":"ref_102","unstructured":"NIST (2020). Security and Privacy Controls for Information Systems and Organizations."},{"key":"ref_103","unstructured":"Center for Internet Security (2021). CIS Community Defense Model v2.0, Center for Internet Security."},{"key":"ref_104","unstructured":"Strom, B.E., Applebaum, A., Miller, D.P., Nickels, K.C., Pennington, A.G., and Thomas, C.B. (2018). MITRE ATT and CK(C): Design and Philosophy, Defense Technical Information Center."},{"key":"ref_105","doi-asserted-by":"crossref","unstructured":"Kwon, R., Ashley, T., Castleberry, J., Mckenzie, P., and Gourisetti, S.N.G. (2020, January 19\u201323). Cyber Threat Dictionary Using MITRE ATT&CK Matrix and NIST Cybersecurity Framework Mapping. Proceedings of the 2020 Resilience Week (RWS), Salt Lake City, UT, USA.","DOI":"10.1109\/RWS50334.2020.9241271"},{"key":"ref_106","doi-asserted-by":"crossref","first-page":"516","DOI":"10.1080\/00207543.2019.1696493","article-title":"The coopetition effect of learning-by-doing in outsourcing","volume":"59","author":"Deng","year":"2021","journal-title":"Int. J. Prod. Res."},{"key":"ref_107","unstructured":"Hamburg, I. (2021). Handbook of Research on Cyber Crime and Information Privacy, IGI Global."},{"key":"ref_108","first-page":"20","article-title":"Assessing the value of executive leadership coaches for cybersecurity project managers","volume":"10","author":"Burrel","year":"2019","journal-title":"Int. J. Hum. Cap. Inf. Technol. Prof."},{"key":"ref_109","doi-asserted-by":"crossref","unstructured":"John, S.N., Noma-Osaghae, E., Oajide, F., and Okokpujie, K. (2020). Cybersecurity Education: The Skills Gap, Hurdle! In Innovations in Cybersecurity Education, Springer.","DOI":"10.1007\/978-3-030-50244-7_18"},{"key":"ref_110","doi-asserted-by":"crossref","first-page":"115","DOI":"10.1007\/978-3-030-43999-6_7","article-title":"Training Methods","volume":"Volume 284","author":"Corradini","year":"2020","journal-title":"Building a Cybersecurity Culture in Organizations"},{"key":"ref_111","unstructured":"Monzelo, P., and Nunes, S. (2019). CAPSI 2019 Proceedings, CAPSI."},{"key":"ref_112","doi-asserted-by":"crossref","unstructured":"Badhwar, R. (2021). See Something, Do Something! In The CISO\u2019s Transformation, Springer.","DOI":"10.1007\/978-3-030-81412-0_7"}],"container-title":["Information"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/2078-2489\/14\/11\/586\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,10]],"date-time":"2025-10-10T21:11:48Z","timestamp":1760130708000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/2078-2489\/14\/11\/586"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,10,25]]},"references-count":112,"journal-issue":{"issue":"11","published-online":{"date-parts":[[2023,11]]}},"alternative-id":["info14110586"],"URL":"https:\/\/doi.org\/10.3390\/info14110586","relation":{},"ISSN":["2078-2489"],"issn-type":[{"value":"2078-2489","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023,10,25]]}}}