# Cybersecurity Risk Assessment: A Systematic Mapping Review, Proposal, and Validation
## Appendix A
* NIST (2022) NIST. Common Vulnerability Scoring System Calculator V3.1. 2022. Available online: [[https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator](https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator)]([https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator](https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator)) (accessed on 5 September 2022). * [PERSON] and [PERSON] (2013) [PERSON]; [PERSON], [PERSON]. The expert's judgment application as a technic evaluate Information and Communication Technology (ICT). _Rev. Tecnol. Inf. Commu. Educ._**2013**, \(7\), 11-22. Available online: [[http://servicio.bc.uc.edu.ve/educacion/eduweb/v7n2/art01.pdf](http://servicio.bc.uc.edu.ve/educacion/eduweb/v7n2/art01.pdf)]([http://servicio.bc.uc.edu.ve/educacion/eduweb/v7n2/art01.pdf](http://servicio.bc.uc.edu.ve/educacion/eduweb/v7n2/art01.pdf)) (accessed on 13 September 2022). * [PERSON] et al. (2020) [PERSON]; [PERSON]; [PERSON]; [PERSON] Risk management practices in information security: Exploring the status quo in the DACH region. _Comput. Secur._**2020**, 92, 101776. [CrossRef]
* [PERSON] et al. (2019) [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON] ThreatRiskEvaluator: A Tool for Assessing Threat-Specific Security Risks in the Cloud. In Proceedings of the 2019 International Conference on Cyber Security for Emerging Technologies, CSET 2019, Doha, Qatar, 27-29 October 2019. [CrossRef]
* [PERSON] (2019) [PERSON]; [PERSON] Database Design for Threat Modeling and Risk Assessment Tool of Automated Control Systems. In Proceedings of the 2019 International Russian Automation Conference, RusAutoCon 2019, Sochi, Russia, 8-14 September 2019. [CrossRef]
* [PERSON] et al. (2019) [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON] Research and implementation of intelligent substation information security risk assessment tool. In Proceedings of the 2019 IEEE 8 th Joint International Information Technology and Artificial Intelligence Conference, ITAIC 2019, Chongqing, China, 24-26 May 2019; pp. 1306-1310. [CrossRef]
* [PERSON] et al. (2018) [PERSON]; [PERSON]; [PERSON]; [PERSON] Risk assessment of mobile applications based on machine learned malware dataset. _Multimed. Tools Appl._**2018**, _77_, 5027-5042. [CrossRef]
* [PERSON] et al. (2017) [PERSON]; [PERSON]; [PERSON] Simulation platform for cyber-security and vulnerability analysis of critical infrastructures. _J. Comput. Sci._**2017**, _22_, 179-186. [CrossRef]
* [PERSON] et al. (2017) [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON] An information security risk assessment algorithm based on risk propagation in energy internet. In Proceedings of the 2017 IEEE Conference on Energy Internet and Energy System Integration (EI2), Beijing, China, 26-28 November 2017; pp. 5-10. * [PERSON] and [PERSON] (2016) [PERSON], U.K.; [PERSON] Network security risk level estimation. In Proceedings of the 2016 IEEE 7 th Power India International Conference (PIICON), Bikaner, India, 25-27 November 2016; Volume 3, pp. 54-67. * [PERSON] and [PERSON] (2015) [PERSON]; [PERSON] Automatic security management of computer systems. _Autom. Control. Comput. Sci._**2015**, _49_, 665-672. [CrossRef]
* [PERSON] et al. (2014) [PERSON]; [PERSON]; [PERSON]; [PERSON] Fuzzy tool for conducting information security risk analysis. In Proceedings of the 2014 15 th International Carpathian Control Conference (ICCC), Velke Karlovice, Czech Republic, 28-30 May 2014; pp. 28-33. [CrossRef]
* [PERSON] et al. (2013) [PERSON]; [PERSON]; [PERSON]. Data model extension for security event notification with dynamic risk assessment purpose. _Sci. China Inf. Sci._**2013**, _56_, 1-9. [CrossRef]
* [PERSON] et al. (2012) [PERSON]; [PERSON]; [PERSON]; [PERSON] [PERSON] A multi-objective genetic algorithm for minimising network security risk and cost. In Proceedings of the 2012 International Conference on High Performance Computing and Simulation, HPCS 2012, Madrid, Spain, 2-6 July 2012; pp. 462-467. [CrossRef]
* [PERSON] (2012) [PERSON] Information security risk reduction based on genetic algorithm.