National cybersecurity: internal control and risk management

Abstract

The digitalization of public administration has resulted in an increase in cyber dangers; nevertheless, current approaches to risk management remain fragmented and do not allow for systematic supervision. A thorough examination of Russian and international studies and reviews in the field of cybersecurity has allowed us to organize the current cyber risks facing the state, develop a basic framework for managing them, and create a unified digital system for internal control and risk management, which can serve as the foundation for a nationwide cybersecurity system. This system can provide real-time cyber threat monitoring, automate decision-making, and enhance the overall resilience of government systems. Future research on adaptive cybersecurity systems can use the study’s findings as a theoretical and methodological basis. The conclusions can also be used by businesses that need to safeguard vital information infrastructure and by government organizations developing cybersecurity initiatives.