Prioritizing cibersecurity in resource-constrained environments: a framewoork for critical sectors

In the era of rapid digital transformation, cybersecurity has emerged as a critical concern across diverse sectors, particularly as interconnected systems grow increasingly complex. Low- and Middle-Income Countries (LMICs) face unique challenges in this landscape, including limited resources, weak institutional frameworks, and growing systemic vulnerabilities. This dissertation seeks to address critical gaps in the understanding and management of systemic cybersecurity risks, offering a novel perspective and actionable solutions for enhancing sectoral resilience. The dissertation comprises four interconnected chapters. Chapter 1 redefines systemic cybersecurity risk, highlighting its ambiguous definition and the challenges posed by interconnected environments. Drawing lessons from the financial sector and analyzing real-world incidents, this chapter provides a comprehensive, flexible, and system-oriented definition of systemic cybersecurity risk. Chapter 2 shifts focus to LMICs, exploring the potential of maturity models for prioritizing cybersecurity investments in resource-constrained settings. It evaluates the adaptability of these models in addressing short-term cybersecurity needs while supporting long-term decision-making and resilience. Chapter 3 introduces the Sectoral Cybersecurity Maturity Model, a sector-agnostic tool developed by the World Bank to guide investment prioritization and policy development in LMICs. Finally, Chapter 4 presents sectors applications discussing practical utility and adaptability across contexts.