ORIGINAL PAPER
Digital resilience of an organization in risk management
More details
Hide details
1
John Paul II University in Biala Podlaska Faculty of Technical Sciences
These authors had equal contribution to this work
Submission date: 2026-01-31
Final revision date: 2026-09-05
Acceptance date: 2026-10-03
Publication date: 2026-10-29
Corresponding author
Marta Chodyka
John Paul II University in Biala Podlaska Faculty of Technical Sciences
JoMS 2026;67(3):61-75
KEYWORDS
TOPICS
ABSTRACT
Objectives:
The study aimed to assess how implemented protection and monitoring measures in an ICT environment strengthen organisational resilience in security science terms - namely the ability to maintain operational continuity, reduce vulnerabilities and disruption impacts, and improve early detection and assessment of security-threatening events.
Material and methods:
This study used a practical approach, combining an in-depth case analysis with a hands-on simulation. The team designed an ICT environment featuring separate zones with different trust levels and specific access-control rules. They then tested the setup by simulating system failures, assessing the effectiveness of zone separation and access controls, and running realistic scenarios involving attempts at unauthorised access and privilege escalation. Data included connectivity continuity metrics (latency, packet loss) and SIEM-registered events and alerts.
Results:
The organisation demonstrated greater effectiveness in handling disruptions and threats. When failures occurred, only a brief dip in connectivity was observed (about 8% packet loss), and the system’s access controls and network segmentation prevented all unauthorised communication attempts from reaching the network during testing. At the same time, the monitoring tools helped the team quickly spot and categorise events that could lead to security incidents. This made it easier to stay aware of what was happening and to respond quickly when needed.
Conclusions:
In conclusion, the steps taken created a strong security system that reduced risks, prevented problems from worsening, and helped spot threats earlier. Because of these measures, the organisation is better prepared to keep its services running, control access, and handle incidents, which means fewer disruptions and less damage to its reputation.
REFERENCES (24)
1.
Akamai Technologies. (2023, November 6). Ransomware Attacks Have Doubled Over the Past Two Years, According to Akamai Research (Press Release). Cambridge, MA: Akamai. Retrieved from Akamai Newsroom.
2.
Ahn, G., Jang, J., Choi, S., & Shin, D. (2024). Research on Improving Cyber Resilience by Integrating the Zero Trust Security Model with the MITRE ATT&CK Matrix. IEEE Access, 12, 89291–89309.
https://doi.org/10.1109/ACCESS....
3.
Annarelli, A., Nonino, F., & Palombi, G. (2020). Understanding the management of cyber resilient systems. Computers & Industrial Engineering, 149, 106829.
https://doi.org/10.1016/j.cie.....
4.
Bagheri, S., Ridley, G., & Williams, B. (2023). Organisational cyber resilience: Management perspectives. Australasian Journal of Information Systems, 27.
https://doi.org/10.3127/ajis.v....
5.
Bajpai, M. (2019). Optimising network availability through out-of-band configuration change (OOBC) process – Network management for communication service providers. European Journal of Advances in Engineering and Technology, 6(11), 90–93.
6.
Baran, P. (1964). On Distributed Communications: V. History, Alternative Approaches, and Comparisons (RM-3097). Santa Monica, CA: RAND Corporation.
8.
Chandramouli, R., et al. (2022). Guide to a Secure Enterprise Network Landscape (NIST SP800-215). Gaithersburg, MD: National Institute of Standards and Technology.
https://doi.org/10.6028/NIST.S....
9.
Chodyka, M. (2025). Security analysis of public administration databases in Poland within a Zero-Trust environment. In R. Szczebiot (Ed.), Innovation Trends 2025 (pp. 91–99). University of Lomza. ISBN 978-83-60571-75-0.
10.
Ciekanowski, Z., & Wyrębek, H. (2016). Zarządzanie ryzykiem. De Securitate Et Defensione. O Bezpieczeństwie I Obronności, 2(2).
12.
Heeks, R., & Ospina, A. V. (2018). Conceptualising the link between information systems and resilience: A developing country field study. Information Systems Journal, 29(1), 70–96.
https://doi.org/10.1111/isj.12....
13.
IBM Security. (2023). Cost of a Data Breach Report 2023. IBM Corporation.
15.
Kim, D., & Solomon, M. G. (2018). Fundamentals of Information Systems Security (3rd ed.). Jones & Bartlett Learning.
16.
Lu, J., Wang, X., Feng, Y., & Liu, L. (2025). Surviving and thriving: An organisational resilience framework in the digital age. Industrial Management & Data Systems. Advance online publication.
https://doi.org/10.1108/IMDS-1....
18.
National Institute of Standards and Technology (NIST). (2011). Managing Information Security Risk: Organisation, Mission, and Information System View (NIST SP800-39). Gaithersburg, MD: NIST.
19.
Ponemon Institute. (2016). Cost of Data Centre Outages (Research report; sponsored by Vertiv). Ponemon Institute LLC.
20.
Rose, S., Borchert, O., Mitchell, S., & Connelly, S. (2020). Zero Trust Architecture (NIST Special Publication 800-207). National Institute of Standards and Technology.
https://doi.org/10.6028/NIST.S....
21.
Scarfone, K., & Hoffman, P. (2009). Guidelines on Firewalls and Firewall Policy (NIST SP800-41Rev.1). Gaithersburg, MD: NIST.
22.
Singh, K., Chatterjee, S., Mariani, M., & Fosso Wamba, S. (2025). Cybersecurity resilience and innovation ecosystems for sustainable business excellence: Examining the dramatic changes in the macroeconomic business environment. Technovation, 143, 103219.
https://doi.org/10.1016/j.tech....
23.
Sunkara, G. (2024). The Importance of Network Segmentation in Security. International Journal of Engineering and Technical Research, 8(3), 45–53.
https://doi.org/10.5281/zenodo....