Improving Interdisciplinary Communication With Standardized Cyber Security Terminology: A Literature Review <s> C. PRIVATE <s> The demand for cybersecurity professions faces continual shortages. Real-world cyber threats continue to drive this demand as we face a daily barrage of attacks on our critical infrastructure, national, and private industry assets. To meet this demand, many cybersecurity and information assurance educational programs have emerged. These programs range from specialized tracks within traditional academic programs to specialized degree titles developed solely for the purpose of producing cyber capable graduates. In this paper we document curriculum development that focuses on a systems level approach to cyber assurance education. This program incorporates both hardware and software aspects to ensure cyber security graduates are produced that can address adversaries that target complete system implementations. <s> BIB001 </s> Improving Interdisciplinary Communication With Standardized Cyber Security Terminology: A Literature Review <s> C. PRIVATE <s> The internet which was originally developed as an open distributed system has since evolved to become a key platform for connectivity of businesses and communities. Today, the internet is used for transferring critical information amongst sophisticated systems. These systems extend beyond one business organization to community of customers and suppliers. Consequently, today, vulnerabilities and risks to the Internet are equally relevant to systems that are integrated within corporate networks. Cloud Computing solutions, Supervisory Control and Data Acquisition (SCADA) systems and the Bring Your Own Device (BYOD) approach adopted by some organizations are examples of complexity of managing Internet security today. These systems are not only vulnerable to own system specific issues but also threatened by other Internet-related vulnerabilities. Whilst numerous previous studies have identified the need for managing Internet security, there remains a need for taking a strategic approach in security management of the Internet and sensitive Industrial Control Systems (ICS) integrated systems. This paper examines research on Internet security using a risk management approach. It presents an overview of key issues and recommends a management framework for secure Internet access. <s> BIB002 </s> Improving Interdisciplinary Communication With Standardized Cyber Security Terminology: A Literature Review <s> C. PRIVATE <s> Supply chain management has become dependent on electronic systems; since the 2000s, we have seen the emergence of information technology solutions to support business operations, to share information, to connect businesses, and to generate greater visibility along supply chains in order to gain knowledge and control of processes. On the other hand, although supply chains have pursued aspects such as the standardization of business processes, increased communication, connectivity, and data exchange, the vulnerability of these systems to cyber-attacks is nevertheless increasing. Why is this? In modern supply chains, information is shared digitally more than any other way, and supply chains are so reliant on good quality information that, without it, supply chain managers cannot make decisions on forecasts, production, distribution, etc. Equally importantly, poor data leads to poor decisions and performance. So, even with the most efficient and responsive supply chain, performance will be greatly compromised without good quality information. <s> BIB003
The third category we propose concerns business practices and other organizational and human factors affecting cyber security. The following papers give an illustrative overview of the types of papers in this category. Messmer (2013) calls attention to the lack of coordination in businesses, which are also lagging behind technology  . She points to the fact that insurance decisions concerning cyber security are not discussed as often as they should be with C-level information officers. This problem is easily remedied, but it is a reflection of other organizational shortcomings in the workforce. BIB003 notes that the weak links in supply chains are often subject to attack. By analyzed the literature to identify if supply chain models can incorporate ''cyber-resilience,'' they provided recommendations for practice as well as a number of research directions for identifying and securing against cyber-risk in supply chains BIB003 . ''Cyber-resilience'' is a popular buzzword that contrasts with cyber security by emphasizing the inevitability of cyberattacks and the importance of being able to rebound as a business from such hiccups. However, proper cyber security education among employees and management is a better solution than implementing buzzwords and would eliminate the confusing notion that cyber security does not imply resilience. Andel et al. (2013) surveyed various cyber programs at universities and retroactively document how a particular program developed at the University of South Alabama was created, detailing goals and objectives, and creating a curriculum that attempts to be comprehensive. They comment briefly on the problem of naming courses, which reflects the author's views on the necessity of a defined vocabulary: they give the example of Cybersecurity vs Cyber Engineering and the ambiguity of the differences between these two topics BIB001 . BIB002 write about a topic they say fall under ''broader Internet security management and governance of the Internet and the cyberspace.'' They take a risk management approach to formulate a methodological framework for managing cyber security. They base their conclusions on a review of cases and previous studies, and highlight solutions at various levels of business operations, considering various elements of technology, people, and ''processes,'' emphasizing that technology cannot solve all problems BIB002 .  identify domains of science that contribute to the ''cyber'' field of study. They also identify points of necessary (presently implemented or not) collaboration across fields regarding a nation's cyber readiness. The goal of their paper is to identify areas not fully explored in academia, and for generating curricula recommendations. They aim to be comprehensive, drawing knowledge from Russia, and covering math, finance, linguistics, and natural sciences  . All the papers in this category point out that the organizational principles of businesses, and even fields of study, are not synchronized. There are vulnerabilities in supply chains, in trusting employees, and in social engineering. These papers also illustrate the point to be covered later about a lack of well-defined terminology and the prevalence of ad hoc phrases to describe certain, even redundant, aspects of cyber security. Moreover, papers in this category make clear that technological solutions alone cannot ensure cyber security.