## 5 Discussion  
In this study, an SLR was conducted on academic papers that explored methodologies, standards, and regulations for risk assessment with a cyber resilience perspective. For this purpose, the review centers on three research questions, elaborated in Table 2. Using  
\begin{table}
\begin{tabular}{p{113.8 pt} p{113.8 pt} p{113.8 pt} p{113.8 pt}} \hline \hline
**Ref.** & **Name** & **Description** & **Cat.** \\ \hline
[107] & Maritime Safety Management System (SMS) Requirements & Requirements for integrating cyber risk management into maritime SMS. & Oth. \\ \hline
[106] & STCW Convention & International convention outlining general requirements for seafarers, including cybersecurity. & Oth. \\ \hline
[109] & HIPAA & Health Insurance Portability and Accountability Act governing data security and privacy in the US healthcare sector. & Act \\ \hline
[121] & EU Cybersecurity Act (CSA) & Regulation to strengthen the security of network and information systems across the EU. & Reg.; Act. \\ \hline
[102] & UNECE Regulation & United Nations Economic Commission for Europe regulations focusing on vehicle safety and cybersecurity. & Reg. \\ \hline
[121] & National Risk Register, UK (2016) & Report outlining the key risks faced by the United Kingdom, including cybersecurity threats. & Oth. \\ \hline
[121] & National Risk Analysis, Norway (2014) & Analysis detailing the primary risks facing Norway, with emphasis on national security. & Oth. \\ \hline
[121] & Security Strategy for Society, Finland Security Committee & Strategy document that outlines Finland’s approach to security, including cyber resilience. & Oth. \\ \hline
[121] & National Safety and Security Strategy, The Netherlands & Strategy for enhancing safety and security in the Netherlands, addressing cyber risks. & Oth. \\ \hline
[99] & European Operational Concept Validation Methodology (EOCVM) & Methodology for validating operational concepts within the EU. & Oth. \\ \hline
[112] & EU AI Act & Regulation proposed by the European Union to govern artificial intelligence and its use. & Reg. \\ \hline
[105] & International Civil Aviation Organization (ICAO) Aviation Cybersecurity Strategy & Strategy for managing cybersecurity risks in international civil aviation. & Oth. \\ \hline
[101,103] & European Union Aviation Safety Agency (EASA) Concept Paper & Concept patrolling the approach to aviation safety, including cybersecurity. & Oth. \\ \hline
[131] & US Department of Energy Cybersecurity Frameworks & Frameworks and guidelines for ensuring cybersecurity in the energy sector. & RegF \\ \hline
[39,68] & UN Regulation No. 155 on Cybersecurity Systems for vehicles. & Regulation focusing on cybersecurity management systems for vehicles. & Reg. \\ \hline
[132] & Presidential Policy Directive 21 (PPD-21/2013) & US directive focusing on the security and resilience of CI. & Dir. \\ \hline
[132] & Cybersecurity Enhancement Act of 2014 & US law to promote cybersecurity research, development, and public–private partnerships. & Act \\ \hline
[132] & Executive Order (EO) 13636 & US executive order aimed at improving CI cybersecurity. & Act \\ \hline
[109,117,132] & EU Regulation 2016/679 (GDPR) & General Data Protection Regulation governing data protection and privacy in the EU. & Reg. \\ \hline
[132] & National Framework for Cybersecurity and Data Protection (FNCS\&DP) & Framework for ensuring cybersecurity and data protection at the national level. & RegF. \\ \hline
[127] & Saudi Arabian Monetary Authority (SAMA) Cybersecurity Framework & Cybersecurity framework used in Saudi Arabia for financial institutions. & RegF. \\ \hline \hline \end{tabular}
\end{table}
Table 8: _Cont._the results of the SLR, presented in Section 4, the answers to the research questions are provided in this section.