Balancing efficiency and security: The role of voluntary standards and emerging technologies in cyber risk management framework in USA perspective

ALOZIE, CHISOM ELIZABETH and OKAFOR, UZOAMAKA (2025) Balancing efficiency and security: The role of voluntary standards and emerging technologies in cyber risk management framework in USA perspective. World Journal of Advanced Research and Reviews, 26 (2). pp. 1746-1776. ISSN 2581-9615

[thumbnail of WJARR-2025-1842.pdf] Article PDF
WJARR-2025-1842.pdf - Published Version
Available under License Creative Commons Attribution Non-commercial Share Alike.

Download ( 965kB)

Abstract

This research examines the distinctive evolution of voluntary cyber risk management frameworks within the United States context, focusing on the tension between security imperatives and operational efficiency. Through a mixed-methods approach combining 37 interviews with U.S. chief information security officers, regulatory experts, and framework architects, alongside survey data from 156 U.S. organizations, this study identifies unique characteristics of the American approach to cyber risk management. Findings reveal that U.S. organizations demonstrate distinctive patterns in framework utilization, prioritizing sector-specific adaptations and legal risk management considerations while leveraging emerging technologies to automate compliance activities. The research identifies a "federated implementation model" prevalent among U.S. enterprises that balances central governance with business unit autonomy. The study contributes a novel "USA Cyber Risk Integration Framework" that accounts for the sectoral regulatory landscape, litigation-aware governance structures, and technology-driven compliance approaches characteristic of U.S. organizations. This research provides valuable insights for security practitioners, technology vendors, and policymakers seeking to understand and enhance cyber risk management effectiveness within the unique American regulatory and business environment.

Item Type: Article
Official URL: https://doi.org/10.30574/wjarr.2025.26.2.1842
Uncontrolled Keywords: Cyber Risk Management; Nist Cybersecurity Framework; Us Regulatory Landscape; Security Automation; Compliance-Driven Governance; Sector-Specific Standards; Public-Private Partnerships
Depositing User: Editor WJARR
Date Deposited: 20 Aug 2025 10:52
Related URLs:
URI: https://eprint.scholarsrepository.com/id/eprint/2969