Abstract:Purpose Various organizational landscapes have evolved to improve their business processes, increase production speed and reduce the cost of distribution and have integrated their Internet with small and medium scale enterprises (SMEs) and third-party vendors to improve business growth and increase global market share, including changing organizational requirements and business process collaborations. Benefits include a reduction in the cost of production, online services, online payments, product distribution channels and delivery in a supply chain environment. However, the integration has led to an exponential increase in cybercrimes, with adversaries using various attack methods to penetrate and exploit the organizational network. Thus, identifying the attack vectors in the event of cyberattacks is very important in mitigating cybercrimes effectively and has become inevitable. However, the invincibility nature of cybercrimes makes it challenging to detect and predict the threat probabilities and the cascading impact in an evolving organization landscape leading to malware, ransomware, data theft and denial of service attacks, among others. The paper explores the cybercrime threat landscape, considers the impact of the attacks and identifies mitigating circumstances to improve security controls in an evolving organizational landscape. Design/methodology/approach The approach follows two main cybercrime framework design principles that focus on existing attack detection phases and proposes a cybercrime mitigation framework (CCMF) that uses detect, assess, analyze, evaluate and respond phases and subphases to reduce the attack surface. The methods and implementation processes were derived by identifying an organizational goal, attack vectors, threat landscape, identification of attacks and models and validation of framework standards to improve security. The novelty contribution of this paper is threefold: first, the authors explore the existing threat landscapes, various cybercrimes, models and the methods that adversaries are deploying on organizations. Second, the authors propose a threat model required for mitigating the risk factors. Finally, the authors recommend control mechanisms in line with security standards to improve security. Findings The results show that cybercrimes can be mitigated using a CCMF to detect, assess, analyze, evaluate and respond to cybercrimes to improve security in an evolving organizational threat landscape. Research limitations/implications The paper does not consider the organizational size between large organizations and SMEs. The challenges facing the evolving organizational threat landscape include vulnerabilities brought about by the integrations of various network nodes. Factor influencing these vulnerabilities includes inadequate threat intelligence gathering, a lack of third-party auditing and inadequate control mechanisms leading to various manipulations, exploitations, exfiltration and obfuscations. Practical implications Attack methods are applied to a case study for the implementation to evaluate the model based on the design principles. Inadequate cyber threat intelligence (CTI) gathering, inadequate attack modeling and security misconfigurations are some of the key factors leading to practical implications in mitigating cybercrimes. Social implications There are no social implications; however, cybercrimes have severe consequences for organizations and third-party vendors that integrate their network systems, leading to legal and reputational damage. Originality/value The paper's originality considers mitigating cybercrimes in an evolving organization landscape that requires strategic, tactical and operational management imperative using the proposed framework phases, including detect, assess, analyze, evaluate and respond phases and subphases to reduce the attack surface, which is currently inadequate.

The MESA Security Model 2.0: A Dynamic Framework for Mitigating Stealth Data Exfiltration

Evolving Defense Mechanism for Future Network Security

Intrinsic Security: A Robust Framework for Cloud-Native Network Slicing via a Proactive Defense Paradigm

How Effective Are the Prevailing Attack-Defense Models for Cybersecurity Anyway?

Proactive Security Defense of Dynamic Network

Social Engineering Attack Detection and Data Protection Model (SEADDPM)

On Data Leakage Prevention Maturity: Adapting the C2M2 Framework

Mitigating cybercrimes in an evolving organizational landscape

Mitigating Data Exfiltration in Storage-as-a-Service Clouds

An Introduction to Adaptive Software Security

Emergent (In)Security of Multi-Cloud Environments

Every Time Can Be Different: A Data Dynamic Protection Method Based on Moving Target Defense.

Security in IS and social engineering -- an overview and state of the art

Development of a threat modelling framework and a web-based threat modelling tool for micro businesses

Ciberseguridad Inteligente

Let's Talk Through Physics! Covert Cyber-Physical Data Exfiltration on Air-Gapped Edge Devices

A Framework for Data-Driven Physical Security and Insider Threat Detection

Designing Secure and Resilient Cyber-Physical Systems: a Model-based Moving Target Defense Approach

Towards a Security Lifecycle Model against Social Engineering Attacks: SLM-SEA

Investigating Dynamic Behavioral Analysis For Instantaneous Identification and Reduction of Changing Security Risks on the World Wide Web

A Multi-level Reference Model and a Dedicated Method for Cyber-Security by Design