A Documentary Research on Synthesizing the Components of Cyber Risk Management Concepts in the Era of Digital Disruption

Abstract

The era of Digital Disruption has significantly transformed the cybersecurity landscape of the public sector. Emerging technologies such as Cloud Computing, the Internet of Things (IoT), Artificial Intelligence (AI), Big Data, and Blockchain have enhanced efficiency, accessibility, and transparency in government services; however, they have simultaneously expanded attack surfaces and increased the complexity of cyber threats. This study aims to (1) synthesize the conceptual components of cyber risk management in the public sector, and (2) examine the relationship between Digital Disruption and Cyber Resilience across national and international governmental contexts. A documentary research method was employed, drawing on academic literature, global cybersecurity frameworks, policy reports, and international research databases.

            The findings reveal seven core components of cyber risk management in the public sector: governance and policy, risk identification and assessment, preventive measures, monitoring and detection, incident response and recovery, human cyber awareness, and digital resilience. Digital Disruption has shifted cyber risk from a technical concern to a strategic state-level issue characterized by interdependence, shared vulnerabilities, and cross-organizational ecosystems, requiring proactive and predictive security approaches supported by data analytics and AI.

            Despite growing scholarly attention, research gaps remain-particularly the dominance of technical perspectives over behavioral and societal dimensions, limited empirical studies on causal relationships between Digital Disruption and Cyber Resilience, and the absence of integrated analytical frameworks linking cyber risk to economic stability, public trust, and human security. These gaps present opportunities for future research, especially in developing public policy, organizational models, and resilience-based cybersecurity strategies.