احمدی، م.، و رضایی، ع. (۱۴۰۲). ارائه چارچوب مدیریت ریسک امنیت سایبری در سازمان‌های مالی ایران. فصلنامه مدیریت فناوری اطلاعات، ۱۵(۳)، ۵۵–۷۸.
جعفری، س.، محمدی، ع.، و کریمی، ح. (۱۴۰۱). ارزیابی بلوغ امنیت سایبری در سازمان‌های ایرانی با رویکرد COBIT 2019. پژوهش‌های مدیریت فناوری اطلاعات، ۱۴(۲)، ۹۱–۱۱۲.
حسینی، م.، و همکاران. (۱۴۰۳). نقش هوش مصنوعی در مدیریت ریسک امنیت اطلاعات. فصلنامه پژوهش‌های فناوری اطلاعات، ۱۸(۱)، ۲۵–۴۸.
Ahmadi, M., & Rezaei, A. (2023). A framework for cybersecurity risk management in Iranian financial organizations. Journal of Information Technology Management, 15(3), 55–78. (in Persian).
Alhidaifi, S. M., Asghar, M. R., & Ansari, I. S. (2024). A survey on cyber resilience: Key strategies, research challenges, and future directions. ACM Computing Surveys, 56(8), 196, 1–48. https://doi.org/10.1145/3649218
Committee of Sponsoring Organizations of the Treadway Commission (COSO), & World Business Council for Sustainable Development (WBCSD). (2018). Enterprise risk management: Applying enterprise risk management to environmental, social and governance-related risks.
Creswell, J. W., & Plano Clark, V. L. (2021). Designing and conducting mixed methods research (3rd ed.). SAGE.
Deloitte. (2024). Global Future of Cyber Survey 2024. Deloitte.
ENISA. (2023). Artificial intelligence and cybersecurity: Challenges and opportunities. European Union Agency for Cybersecurity.
ENISA. (2024). ENISA Threat Landscape 2024. European Union Agency for Cybersecurity. https://doi.org/10.2824/0710888
Hair, J. F., Hult, G. T. M., Ringle, C. M., & Sarstedt, M. (2022). A primer on partial least squares structural equation modeling (PLS-SEM) (3rd ed.). SAGE.
Hosseini, M., et al. (2024). Artificial intelligence in information security risk management. Information Technology Research Journal, 18(1), 25–48. (in Persian).
IBM. (2024). Cost of a data breach report 2024. IBM Security.
ISACA. (2020). COBIT 2019 framework: Governance and management objectives. ISACA.
ISACA. (2023). State of Cybersecurity 2023. ISACA.
ISO. (2018). ISO 31000:2018 Risk management—Guidelines. International Organization for Standardization.
ISO. (2019). ISO 22301:2019 Security and resilience—Business continuity management systems—Requirements. International Organization for Standardization.
ISO. (2022). ISO/IEC 27001:2022 Information security, cybersecurity and privacy protection—Information security management systems—Requirements. International Organization for Standardization.
Jada, I., & Mayayise, T. O. (2024). The impact of artificial intelligence on organisational cyber security: An outcome of a systematic literature review. Data and Information Management, 8(2), 100063. https://doi.org/10.1016/j.dim.2023.100063
Jafari, S., Mohammadi, A., & Karimi, H. (2022). Cybersecurity maturity assessment in Iranian organizations based on COBIT 2019. Information Technology Management Studies, 14(2), 91–112. (in Persian).
McIntosh, T. R., Susnjak, T., Liu, T., Watters, P. A., Xu, D., Liu, D., Nowrozy, R., & Halgamuge, M. N. (2024). From COBIT to ISO 42001: Evaluating cybersecurity frameworks for opportunities, risks, and regulatory compliance in commercializing large language models. Computers & Security, 144, 103964. https://doi.org/10.1016/j.cose.2024.103964
Microsoft. (2024). Microsoft Digital Defense Report 2024. Microsoft.
National Institute of Standards and Technology. (2023). Artificial intelligence risk management framework (AI RMF 1.0). NIST AI 100-1. https://doi.org/10.6028/NIST.AI.100-1
Organisation for Economic Co-operation and Development (OECD). (2023). G20/OECD principles of corporate governance. OECD Publishing.
Pascoe, C., Quinn, S., & Scarfone, K. (2024). The NIST Cybersecurity Framework (CSF) 2.0. NIST Cybersecurity White Paper 29. https://doi.org/10.6028/NIST.CSWP.29
World Economic Forum. (2024). Global Cybersecurity Outlook 2024. World Economic Forum.
World Economic Forum. (2025). Global Cybersecurity Outlook 2025. World Economic Forum.
