# Alignment of Cybersecurity Incident Prioritisation with Incident Response Management Maturity Capabilities

arXiv: https://arxiv.org/abs/2410.02259 · HTML: https://mlsanity.com/paper/2410.02259/

## Key facts

- Cited by 1 papers in the map (data through 14 Oct 2026).
- First posted on arXiv 3 Oct 2024.

## Built on by (most cited first, 1 of 1)

- [DACRI: Decision-Aware Causal Intervention Ranking for Critical Supply Chains](https://mlsanity.com/paper/2608.11154/) (2026)

## Abstract (arXiv)

The increasing frequency and sophistication of cybersecurity incidents pose significant challenges to organisations, highlighting the critical need for robust incident response capabilities. This paper explores a possible utilisation of IR CMMs assessments to systematically prioritise incidents based on their impact, severity, and the incident response capabilities of an organisation in specific areas associated with human and organisational factors. The findings reveal common weaknesses in incident response, such as inadequate training and poor communication, and highlight best practices, including regular training programs, clear communication protocols, and well-documented response procedures. The analysis also emphasises the importance of organisational culture in enhancing incident response capabilities. By addressing the gap in understanding how the output of IRM assessments can be immediately utilised to prioritise high-risk incidents, this paper contributes valuable insights to academia and practice, offering a structured approach to enhancing organisational resilience against cybersecurity threats.