[DSRP Evidence](https://dsrpevidence.org/)

# Systems Thinking in Cybersecurity: Ending With the Beginning in Mind

## Details

**Authors** Collins M

**Year** 2024

**Publisher** Journal of Systems Thinking 4(1):1-30

**Kind of work** article

**Discipline** Cybersecurity

**Reading level** technical

**Kind of engagement** scholarly

[Read it at the publisher](https://doi.org/10.54120/jost.2024-000053MC) 
10.54120/jost.2024-000053MC

## In authors' words

### Abstract

Despite the increasing complexity of the digital landscape and the rise in cyber-attacks,systems thinking has not been widely utilized in cybersecurity. This research paper employs a SystemsLiterature Review to examine the current state of knowledge regarding the use of systems thinking incybersecurity and identifies several issues, including the lack of consistency in defining "systemsthinking”, narrow use cases, and a lack of empirical evidence supporting the reviewed methods. Differentresearchers and practitioners may have varying interpretations of this concept, leading to confusion and alack of standardizedapproaches. This inconsistency hampers the development of a cohesive frameworkfor applying systems thinking in cybersecurity. To address these challenges, future research should focuson developing a common understanding and definition of systems thinking in the context of cybersecurity.This will facilitate communication and collaboration among researchers and practitioners, leading to moreconsistent and effective approaches. Additionally, there is a need for empirical studies that rigorouslyevaluate the impact of applying systems thinking in cybersecurity. These studies should assess theeffectiveness of different methodologies and frameworks in real-world scenarios, providingevidence-based insights into their benefits and limitations. In conclusion, while the application of systemsthinking in cybersecurity holds promise, there are challenges that need to be addressed. Resolving thesechallenges is crucial for advancing the field and establishing a solid foundation for the application ofsystems thinking in cybersecurity.

### What they set out to do (purpose)

A systems literature review of how systems thinking has been used in cybersecurity.

### What they found (results)

The field lacks a consistent definition of "systems thinking", shows narrow use cases, and offers little empirical evidence; a common definition and rigorous real-world studies are the prerequisites for progress.

## Commentary

### In short

Reviews the literature on systems thinking in cybersecurity and finds inconsistent definitions, narrow uses and little empirical evidence.

### Response

A systems literature review finding that cybersecurity lacks a consistent definition of systems thinking, uses it narrowly, and offers little empirical evidence. A field-level diagnosis of the problem a universal theory claims to solve.

**Patterns it shows** D, P

**How to cite this** Collins M (2024). Systems Thinking in Cybersecurity: Ending With the Beginning in Mind. Journal of Systems Thinking 4(1):1-30.