Bridging Cyber Resilience and IT Business Value: A Longitudinal Bibliometric Analysis

Cyber resilience is often defined as the ability of an organization to continuously deliver the intended outcome despite adverse cyber events. While this definition takes the business and IT business value as a starting point, literature mainly focuses on technical or operational aspects of critical infrastructure or supply chains. This paper uses a longitudinal bibliometric analysis to analyze trends in both the current body of knowledge and the past body of knowledge regarding cyber resilience. The study shows that the domain shows a clear interest in emerging technologies (e.g., AI). However, it lacks fundamental conceptual research that tries to integrate cyber resilience with IT business value and the broader IT governance literature. To conclude, the results suggest that the domain would benefit from research that focuses on the business side of cyber resilience and the IT value it hopes to protect, instead of focusing on technical measures or sector-specific research.