Extending supply chain risk and resilience frameworks to manage cyber risk

This paper proposes two complementary tools for the description and quantification of dynamic effects arising from supply chain cyber-attacks. The first tool proposes a comprehensive analysis of the problem space through system dynamics methods, to identify explicitly mental models regarding aspects such as stakeholders, relevant relationships, feedback effects and potential policy levers. The second tool is proposed as a way of transitioning towards a dynamic analysis of the problem of cyber-attacks on supply chains, and is complementary to existing risk analysis tools.