Cybersecurity Risk Management in the Age of Digital Transformation: A Systematic Literature Review

The cloud, the IoT, AI, and elaborate advances in data analytics have radically changed organizational business models and practices, in terms of digital transformation of various industries. The high rate of technological change, however, has also led to an increase of cybersecurity threats, which have high levels of threats to information integrity, privacy and continuity of operation. The following paper consists of a systematically reviewed literature analysis of the existing cybersecurity risk management practices within the framework of digital transformation, which analyzes the evidence between the year 2014 and 2024 throughout the major scholarly databases. At the end of the selection out of 2,311 sources considered, 87 peer-reviewed studies, based on the PRISMA guidelines, were chosen to answer the question of risk typology, assessment methodology, and mitigation frameworks. Among other trends outlined in the review, there is a significant transition to the paradigm of proactive risk management and focus on real-time management, AI-optimized threat identification, and cross-sector security cooperation. It lumps cybersecurity risk into technical risks, human risks, procedural risks and third-party risks and it exposes risks faced by the sectors, particularly the healthcare center, the finance and the energy systems. More so, the findings define the low application of quantitative risk assessment models in the practice even though they have been found useful in the academic research. The review reveals marked deficiencies in longitudinal risk assessment, sectoral bias in failure to establish literature especially in the developing economies. This paper can effectively form a critical basis of future research and strategic policy-making by summarizing the existing state of knowledge and determining urgent challenges. It provides a well-grounded evidence framework to organizations willing to develop adaptive, resilient, and data-based cybersecurity risk management systems that comply with the expectations of the digital era.