Research papers, policy briefs, frameworks and articles advancing converged security - including the full GCSB Converged Security Framework (CSF) suite of published standards and policies (Version 2.0).
The Converged Security Framework suite, Version 2.0, issued and effective 13 October 2026 by the Global Converged Security Board (GCSB). Each document is published and maintained by GCSB - read the current versions online at gcsb.uk/standards.
Strategic framework for unified risk management and organisational resilience, integrating cybersecurity and physical security into a cohesive operational strategy.
Foundational standard defining best practices for implementing unified risk management through converged security frameworks across cyber, physical and OT domains.
Framework for developing unified security competencies across cyber-physical domains, defining cross-functional training programmes, awareness coverage targets and tabletop exercises validating cross-domain incident response.
Mandatory requirements for governance and leadership structures that integrate cybersecurity, physical security and OT security under unified management.
Best practices for unified technology integration and architecture across cyber-physical security domains - integrated SIEM/PSIM, Zero Trust across IT and OT, and AI/ML for predictive threat analysis.
Unified incident response and business continuity across cyber-physical security domains, addressing hybrid, systemic and cascading risks with coordinated response teams and integrated BCP.
Requirements for unified IAM across cybersecurity, physical security and OT - unified identity governance, lifecycle management, authentication, Privileged Access Management and federation.
Best practices for unified data protection and privacy across cyber-physical domains - integrated PIA, Data Governance, Privacy by Design Architecture, DLP, data subject rights and breach notification.
Converged security risk management protocols, strategic assessment methodologies and unified governance frameworks - unified risk assessment, threat analysis, integrated compliance management and CCSO authority structures.
Unified governance framework for the CCSO role with executive authority across cyber, physical and OT domains - governance structure, risk management, IAM, incident response and compliance.
CSI faculty and graduates are invited to submit papers to the GCSB Journal of Converged Security. There are no publication fees, and every submission receives double-blind peer review.
No papers by CSI graduates or faculty have been published yet - the first issue of the Journal is in preparation. Accepted papers by CSI authors will appear here automatically.
Peer-reviewed journal articles by Prof. Dr. Vladimir Bunic, as listed on his ORCID profile (0009-0006-6209-629X). New works added to ORCID appear here automatically.Synced with ORCID 11/2/2026, 4:57:38 PM
Introduces a Unified Data Protection and Privacy Architecture for cyber-physical ecosystems where IT, OT and physical security infrastructures share personal data flows. Four interdependent layers - Privacy Governance, Operational Privacy, Technology and Cryptographic Controls, and Assurance and Compliance - address cross-domain data flows, coordinated privacy incident response and regulatory compliance. Aligned with GDPR, NIS2, DORA, ISO/IEC 27001, ISO/IEC 27701, ISO 31000 and ISO 22301, with sector implications for critical infrastructure, financial services, industry and the public sector.
Analyses the converged risk phenomenon in critical infrastructure where AI, digital twins, IoT ecosystems and autonomous OT now take part in operational decisions. A qualitative multi-scenario reconstruction traces propagation pathways such as telemetry corruption, digital twin drift, autonomy escalation, AI misclassification, authentication instability and multi-sector cascading failures, and presents a single governance framework for SOC and GSOC built on telemetry validation, autonomy monitoring, prediction model alignment and systemic risk monitoring - supported by the Converged Security Framework.
Proposes a unified IRBC architecture that integrates cross-domain response policies, Zero Trust enforcement, AI-driven analytics and recovery plans across cyber-physical systems. Draws on ISO/IEC 27001:2022, ISO 22301:2019, ISO 31000:2018, NIST SP 800-61, NIST SP 800-34, NFPA 1600 and European standards, with a dependency model mapping how hybrid, systemic and cascading risks propagate across IT, OT and physical domains - relevant to critical infrastructure, financial institutions, manufacturing and public-sector operators.
Qualitative conceptual study analysing the causes and effects of risk convergence across EU critical infrastructure. Identifies five patterns of risk convergence (cyber-physical interdependencies, operational-cyber propagation, human-factor amplification, regulatory-risk misalignment, organisational fragmentation) and proposes a hybrid governance system with structural, operational and assurance layers - one of the earliest governance-focused models tailored to converged risk environments in EU critical infrastructure. Triangulated with NIS2, CER, GDPR, DORA and the Cyber Resilience Act.
How digital strategies can boost integration and overall performance of enterprise converged security systems. Mixed-methods research combining qualitative insights and numerical data on everyday security practices, technology uptake and stakeholder perspectives - with particular emphasis on healthcare environments where patient data and operational continuity are critical.
Examines how laws apply to enterprise security systems within the EU. Highlights fragmentation across jurisdictions, gaps in compliance and the impact on risk management - especially in healthcare, where data protection is critical. Argues for more harmonised legislation to support stronger operational resilience across member states.
Investigates complexities and obstacles faced by enterprises in the EU when implementing governance frameworks for converged security systems. Explores regulatory discrepancies, technological integration issues and organisational-culture impacts on effective governance. Qualitative data from case studies, interviews and surveys with security professionals and compliance officers.
A practitioner-oriented book covering converged security systems and their function in manufacturing environments. Detailed technology solutions, implementation guidance across varied manufacturing settings and operational best practices for converged security operations.
Interested in joint research, policy consultation, speaking engagements or implementing the GCSB Converged Security Framework in your organisation? Reach out to our faculty.
