[DSRP Evidence](https://dsrpevidence.org/)

# Systems Thinking in Cybersecurity: Ending With the Beginning in Mind

Collins M, 2024, Journal of Systems Thinking 4(1):1-30 — Cybersecurity

Patterns: [Distinctions](https://dsrpevidence.org/pattern/distinctions), [Perspectives](https://dsrpevidence.org/pattern/perspectives)

## In short

Reviews the literature on systems thinking in cybersecurity and finds inconsistent definitions, narrow uses and little empirical evidence.

## What they found (results)

The field lacks a consistent definition of "systems thinking", shows narrow use cases, and offers little empirical evidence; a common definition and rigorous real-world studies are the prerequisites for progress.

## What they set out to do (purpose)

A systems literature review of how systems thinking has been used in cybersecurity.

## Abstract

Despite the increasing complexity of the digital landscape and the rise in cyber-attacks,systems thinking has not been widely utilized in cybersecurity. This research paper employs a SystemsLiterature Review to examine the current state of knowledge regarding the use of systems thinking incybersecurity and identifies several issues, including the lack of consistency in defining "systemsthinking”, narrow use cases, and a lack of empirical evidence supporting the reviewed methods. Differentresearchers and practitioners may have varying interpretations of this concept, leading to confusion and alack of standardizedapproaches. This inconsistency hampers the development of a cohesive frameworkfor applying systems thinking in cybersecurity. To address these challenges, future research should focuson developing a common understanding and definition of systems thinking in the context of cybersecurity.This will facilitate communication and collaboration among researchers and practitioners, leading to moreconsistent and effective approaches. Additionally, there is a need for empirical studies that rigorouslyevaluate the impact of applying systems thinking in cybersecurity. These studies should assess theeffectiveness of different methodologies and frameworks in real-world scenarios, providingevidence-based insights into their benefits and limitations. In conclusion, while the application of systemsthinking in cybersecurity holds promise, there are challenges that need to be addressed. Resolving thesechallenges is crucial for advancing the field and establishing a solid foundation for the application ofsystems thinking in cybersecurity.

These researchers were not testing DSRP. The finding is theirs; the correspondence to DSRP is drawn by this site.

[Source](https://doi.org/10.54120/jost.2024-000053MC)