This study empirically investigates the performance of Elastic Machine Learning, an industrial, unsupervised anomaly detection tool, in the identification of fraudulent behavior in banking transactions. Using AI-generated datasets that were designed to simulate realistic banking environments,...

We propose a quantitative framework to track systemic risk arising from cyber vulnerabilities of the U.S. financial system. Synthesizing financial, economic, cyber, and network data that covers thousands of financial institutions and technological firms, we develop an index that tracks...

As Thailand's financial sector accelerates its digital transformation, cybersecurity has transitioned from a mere technical support function to a strategic imperative that governs operational risk and financial stability. This study empirically examines the efficacy of cyber risk controls and...

The paper synthesizes global experiences and key lessons in the regulation and supervision of cyber risk in the financial sector. It draws on the IMF’s financial stability surveillance and technical assistance work. It underscores the increasing frequency and complexity of cyber threats. These...

This study examines how collaborative open innovation mechanisms can enhance cyber resilience in small and medium-sized enterprises (SMEs) operating under increasing digital risk and resource constraints. Employing a mixed-method research design, the study integrates a systematic literature...

Investment in cybersecurity in an interconnected banking system has public-good properties: positive externalities can generate systemic underinvestment. Using confidential supervisory data from the European Central Bank, we first identify "laggard" European banks that underinvest relative to...

This study investigates the evolving trajectories of romance fraud offenders in Ghana through a longitudinal qualitative design grounded in actor-network theory. Drawing on interviews with sixteen self-identified scammers conducted over a four-year period, the research traces how individuals...

This study, grounded in Rational Choice Theory, explores the strategies and decision-making processes of online romance fraud perpetrators in Ghana. Using a qualitative approach, thirteen individuals involved in such fraud were interviewed through purposive and snowball sampling. Data were...

In recent years, regulatory authorities, shareholders, managers, and governance bodies have been more aware of the growing wave of cyber threats and information security breaches and their effects on business operations. Cybersecurity risk disclosure has been recognized as a critical governance...

We examine how cybercrime impacts victims' risk-taking and returns. The results from our difference-in-differences analysis of a sample of victim and matched non-victim investors on the Ethereum blockchain are in line with prospect theory and suggests that victims increase their long-term total...

Digitalisation of health services brings many benefits to patients, including electronic health records, telemedicine, and AI-driven diagnostics. However, healthcare is one of the most targeted sectors by cyber and ransomware attacks. To better protect its healthcare systems and create a safer...

Digitalisation of health services brings many benefits to patients, including electronic health records, telemedicine, and AI-driven diagnostics. However, healthcare is one of the most targeted sectors by cyber and ransomware attacks. To better protect its healthcare systems and create a safer...

Ransomware has become the most common cyber risk for businesses. The rise is not driven by attackers using innovative attacks, but instead by deteriorating negotiation outcomes. The average payment grew by almost 20,000% since 2018. However, it remains unclear why attackers can demand ever...

As governments across the world increasingly undergo digitalisation processes, ensuring cybersecurity of these provisions cannot be 100% guaranteed. How, then, can governments best respond to a cybersecurity crisis in order to bolster cybersecurity in the future? Even Estonia, one of the...

The digitisation of seaports has brought about a significant improvement in efficiency, productivity, and communication within the maritime industry. However, the increasing reliance on technology exposes seaports to cyber threats, constituting significant risk to the economy and national...

This article provides an overview of the current state-of-the-art in cyber risk and cyber risk management, focusing on the mathematical models that have been created to help with risk quantification and insurance pricing. We discuss the main ways that cyber risk is measured, starting with...

Although previous research on the predictors of cyber fraud victimization has provided evidence of the impact of routine activity and low self-control on the risk of cyber fraud victimization, little knowledge is available in Japan. In addition, to the best of our knowledge, no study has yet...

Health entities across Europe are increasingly reliant on digital solutions - from electronic health records and telemedicine to connected medical devices and AI-powered diagnostics. This digital transformation also brings greater exposure to cyber threats such as ransomware, phishing and the...

We live in an era where semiconductors underpin global technological infrastructures. However, the increasing complexity and cybersecurity vulnerabilities within semiconductor supply chains, exposes all technology-based industries to significant, cyber risks.This paper investigates how incumbent...

We demonstrate how computer-based simulations could support cyber stress testing exercises through a three-step framework. First, cyber-attack scenarios are designed to target the systemic nodes of a payment network at different times, disrupting a major bank, critical service provider,...

In this handbook, we define a cyber stress test as 'a targeted assessment of the resilience of individual organisations and their ability to withstand and recover from significant cybersecurity incidents, ensuring the provision of critical services, in different risk scenarios.' Stress tests...

Policy makers, risk managers and information security practitioners need up to date and accurate information on the current threat landscape, supported by situational awareness and threat analysis. The EU Agency for Cybersecurity (ENISA) Cyber Threat Landscape (CTL) reports have been published...

The NIS360 is a new ENISA product that assesses the maturity and criticality of sectors of high criticality under the NIS2 Directive, providing both a comparative overview and a more in-depth analysis of each sector. The NIS360 is designed to assist Member States and national authorities in...

As the incidences of traditional crime rates have begun to decline, there has been a surge and shift in the kinds of criminal activities perpetuated by individuals. The recent shift in criminal activities includes organized crime, white-collar crime, and cybercrime.The increased use and access...

Blockchain is an innovative solution for many supply chain (SC) issues. This study presents empirical and theoretical evidence to address the following research question: How can blockchain impact the information flow in SCs to enhance cyber resilience? The practice-based view provides...