Decision-making frameworks for network resilience: managing and mitigating systemic (cyber) risk

Abstract We introduce a decision-making framework tailored for the management of systemic risk in networks. This framework is constructed upon three fundamental components: (i) a set of acceptable network configurations, (ii) a set of interventions aimed at risk mitigation, and (iii) a cost function quantifying the expenses associated with these interventions. While our discussion primarily revolves around the management of systemic cyber risks in digital networks, we concurrently draw parallels to risk management of other complex systems where analogous approaches may be adequate.