Cybersecurity Assessment Framework: A Systematic Review*

In today's interconnected world, cybersecurity has become a crucial concern for governments, corporations, and individuals. Establishing robust cybersecurity frameworks that effectively address the unique challenges faced by countries is imperative. This systematic literature review explores the origins, functions, assessment methods, remaining issues, and global adoption of cybersecurity frameworks. The review identified 42 relevant articles that provide valuable insights into these areas. The origins of cybersecurity frameworks can be traced back to the 1970s, evolving in response to the increasing prevalence of cybercrime and advancements in technology. Common functions of cybersecurity frameworks include identification, protection, detection, response, and recovery. Assessment methods focus on evaluating the efficiency and maturity of frameworks. The review also highlights the remaining issues, such as the rapidly evolving threat landscape, lack of standardization, complexity, and scalability. Furthermore, it identifies key cybersecurity frameworks employed globally, including the NIST Framework, ISO/IEC 27001, COBIT, CIS Control, and SANS Critical Security Controls. These frameworks address the technology, governance, cultural, and country-specific needs of organizations. The findings contribute to a comprehensive understanding of cybersecurity frameworks and can inform policymakers, practitioners, and researchers in developing effective cybersecurity strategies.