Prioritizing Cybersecurity Controls for SDG 3: An AHP-Based Impact–Feasibility Assessment Framework
Source abstract
Abstract
Cybersecurity is increasingly recognized as a key enabler of Sustainable Development Goals (SDGs) and especially SDG 3 (Good Health and Well-being) as healthcare systems become more digitized. This study prioritizes cybersecurity control families from the NIST 800-53r5 framework using a structured framework combining the Analytic Hierarchy Process (AHP) and the Impact–Feasibility Matrix. From the impact–feasibility perspective, expert judgment reveals that while impact is the primary driver in selecting controls, feasibility—particularly budget and cost constraints—plays a decisive role in real-world implementation. A group of fifteen experts, including cybersecurity officers, health IT professionals, and public health advisors, has participated in structured surveys as per the methodological framework of this paper. Financial and budgetary limitations emerged as the top feasibility barrier, often determining whether high-impact controls are deployed or delayed. This underscores the need for strategic investments and phased implementation approaches, particularly in resource-constrained health systems. The results provide a practical roadmap for policymakers and healthcare administrators to allocate cybersecurity resources effectively, balancing technical necessity with economic feasibility to support resilient digital health infrastructures.
Source: crossref · Quality: baseline
Research context
OpenAlex topics: Supply Chain Resilience and Risk Management · Infrastructure Resilience and Vulnerability Analysis · Information and Cyber Security
SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.
Affiliations
Department of Informatics and Telematics, Harokopio University of Athens, 17671 Athens, Greece
Netcompany S.A., L-1253 Luxembourg, Luxembourg
Funding
European Union’s Horizon Europe Research and Innovation Program
References (38)
Show source-provided references
1. SDG (2025, August 15). Sustainable Development Goals. Available online: https://sdgs.un.org/goals.
2. National Institute of Standards and Technology (NIST) (2025, August 15). NIST Special Publication 800-53 Revision 5, Available online: https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-53r5.pdf.
3. Shojaei, P., Vlahu-Gjorgievska, E., and Chow, Y.W. (2024). Security and privacy of technologies in health information systems: A systematic literature review. Computers, 13.10.3390/computers13020041 ↗
4. A Systematic Review on Cybersecurity Threats and Challenges in Hospitals10.4103/amit.amit_7_24 ↗
5. The Impact of Cyberthreats on the Security of Important Sectors of the Economy on the Example of the Healthcare Sector10.35808/ersj/3970 ↗
6. Evaluation of end user requirements for smart home applications and services based on a decision support system10.1016/j.iot.2021.100431 ↗
7. Analysis and evaluation of major COVID-19 features: A pairwise comparison approach10.1007/s43069-023-00201-y ↗
8. End-user and provider requirements for pricing policies of infrastructure as a service10.1109/MIC.2019.2953025 ↗
9. Dede, G., Petsa, A.M., Kavalaris, S., Serrelis, E., Evangelatos, S., and Oikonomidis, I. (2024, January 29–31). Cybersecurity as a contributor to United Nations SDGs towards enhancing the ESG Reporting. Proceedings of the 2024 5th International Conference in Electronic Engineering, Information Technology & Education (EEITE), Chania, Greece.10.1109/EEITE61750.2024.10654435 ↗
10. Achieving Sustainable Development Goals from a Cybersecurity Perspective
11. Vijarania, M., Gupta, S., Agrawal, A., and Misra, S. (2024). Achieving Sustainable Development Goals in Cyber Security Using AIoT for Healthcare Application. Artificial Intelligence of Things for Achieving Sustainable Development Goals, Springer.10.1007/978-3-031-53433-1_11 ↗
12. Andrade, R.O., Yoo, S.G., Tello-Oquendo, L., and Ortiz-Garcés, I. (2021). Cybersecurity, sustainability, and resilience capabilities of a smart city. Smart Cities and the un SDGs, Elsevier.10.1016/B978-0-323-85151-0.00012-9 ↗
13. A fsQCA-based framework for cybersecurity of connected and automated vehicles: Implications for sustainable development goals10.3390/vehicles6010022 ↗
14. Dede, G., Petsa, A.M., Kavalaris, S., Serrelis, E., Evangelatos, S., Oikonomidis, I., and Kamalakis, T. (2024). Cybersecurity as a Contributor Toward Resilient Internet of Things (IoT) Infrastructure and Sustainable Economic Growth. Information, 15.10.3390/info15120798 ↗
15. Cybersecurity challenges across sustainable development goals: A comprehensive review10.37868/sei.v6i1.id207 ↗
16. Sustainable Development in the Digital World: The Importance of Cybersecurity10.1017/dmp.2024.306 ↗
17. Dede, G., Lalas, G., Filiopoulou, E., and Kamalakis, T. (2025, January 4–6). Assessment of Cybersecurity Measures towards the Achievement of the UN SDG8: An AHP and MoSCoW Approach. Proceedings of the 2025 6th International Conference in Electronic Engineering & Information Technology (EEITE), Chania, Crete.10.1109/EEITE65381.2025.11166010 ↗
18. Convergence properties and practical estimation of the probability of rank reversal in pairwise comparisons for multi-criteria decision making problems10.1016/j.ejor.2014.08.037 ↗
19. Theoretical estimation of the probability of weight rank reversal in pairwise comparisons10.1016/j.ejor.2016.01.059 ↗
20. Marketing applications of the analytic hierarchy process10.1287/mnsc.26.7.641 ↗
21. Aggregating individual judgments and priorities with the analytic hierarchy process10.1016/S0377-2217(97)00244-0 ↗
22. Talero-Sarmiento, L., Gonzalez-Capdevila, M., Granollers, A., Lamos-Diaz, H., and Pistili-Rodrigues, K. (2024). Towards a Refined Heuristic Evaluation: Incorporating Hierarchical Analysis for Weighted Usability Assessment. Big Data Cogn. Comput., 8.10.20944/preprints202404.0848.v2 ↗
23. Urruchi Villegas, D.G., and Pacheco Oropeza, F.A. (2024, January 7–9). Improvement of sales distribution process in a dairy sector company using the impact-feasibility matrix. Proceedings of the 4th Indian International Conference on Industrial Engineering and Operations Management Hyderabad, Telangana, India.
24. Petriki, O., and Bobori, D.C. (2025). Ecological Assessment and SWOT–AHP Integration for Sustainable Management of a Mediterranean Freshwater Lake. Sustainability, 17.10.3390/su17114950 ↗
25. Development of a hybrid AHP-TOPSIS decision-making framework for technology selection in hospital medication dispensing processes10.1109/ACCESS.2023.3348754 ↗
26. A Strong Sustainability Paradigm based Analytical Hierarchy Process (SSP-AHP) method to evaluate sustainable healthcare systems10.1016/j.ecolind.2023.110493 ↗
27. Weng, F., Tian, J., Fang, X., Cheng, S., Pan, Z., and Liu, Y. (2025). Research on establishment decision of medical equipment measurement standard based on GDM-AHP. Sci. Rep., 15.10.1038/s41598-025-94546-5 ↗
28. Maulana, M.M., Suroso, A.I., Nurhadryani, Y., and Seminar, K.B. (2023). The Smart Governance Framework and Enterprise System’s Capability for Improving Bio-Business Licensing Services. Informatics, 10.10.3390/informatics10020053 ↗
29. Review of the main developments in the analytic hierarchy process
30. Saaty, T.L., and Vargas, L.G. (2012). Models, Methods, Concepts & Applications of the Analytic Hierarchy Process, Springer Science & Business Media.10.1007/978-1-4614-3597-6 ↗
31. Munier, N., and Hontoria, E. (2021). Uses and Limitations of the AHP Method, Springer.10.1007/978-3-030-60392-2 ↗
32. Decision-making with the AHP: Why is the principal eigenvector necessary10.1016/S0377-2217(02)00227-8 ↗
33. U.S. Department of Commerce (2025, September 29). Commerce Open Government Plan, Version 4.0, Available online: https://www.nist.gov/system/files/documents/2017/12/20/formatted_nist_open_government_plan_2016_final.pdf.
34. Review of HIPAA, part 1: History, protected health information, and privacy and security rules10.2967/jnmt.119.227819 ↗
35. Resilience in healthcare systems: Cyber security and digital transformation10.1016/j.technovation.2022.102583 ↗
36. WHO (2020). WHO Director-General’s Opening Remarks at the Media Briefing on COVID-19-11 March 2020, WHO.
37. Choi, S.J., and Johnson, M.E. (2019). Do hospital data breaches reduce patient care quality?. arXiv.
38. Dotson, M., Gorli, K., and Coustasse, A. (2025). Cyber Threats in Healthcare: The Ransomware Epidemic. [Ph.D. Thesis, Marshall University].