Operationalizing cybersecurity controls in defence procurement contracts: An empirical study and governance integration model

This academic paper examines how cybersecurity controls (security measures designed to protect systems from attacks) are actually implemented in contracts used by defense organizations when they buy goods and services. The authors present an empirical study (research based on real-world data collection) and propose a governance integration model (a framework for organizing how security rules are managed and enforced) to improve how these security requirements are handled in procurement.