This paper introduces a value-driven cybersecurity innovation framework for the transportation and infrastructure sectors, as opposed to the traditional market-centric approaches that have dominated the field. Recontextualizing innovation categories into sustaining, incremental, disruptive, and transformative, we aim to foster a culture of self-innovation within organizations, enabling a strategic focus on cybersecurity measures that directly contribute to business value and strategic goals. This approach enhances operational effectiveness and efficiency of cyber defences primarily, while also aligns cybersecurity initiatives with mission-critical objectives. We detail a practical method for evaluating the business value of cybersecurity innovations and present a pragmatic approach for organizations to funnel innovative ideas in a structured and repeatable manner. The framework is designed to reinforce cybersecurity capabilities against an evolving cyber threat landscape while maintaining infrastructural integrity. Shifting the focus from general market appeal to sector-specific needs, our framework provides cybersecurity leaders with the strategic cyber-foresight necessary for prioritizing impactful initiatives, thereby making cybersecurity a core business enabler rather than a burden.

翻译：本文提出了一种面向交通运输与基础设施领域的价值驱动型网络安全创新框架，以区别于传统上主导该领域的市场中心化方法。通过将创新类别重新语境化为持续性、渐进式、颠覆性和变革性创新，我们旨在培育组织内部的自我创新文化，使得组织能够战略性地聚焦于那些直接贡献于业务价值与战略目标的网络安全措施。该方法首先提升了网络安全防御的运营效能与效率，同时也使得网络安全举措与关键任务目标实现对齐。我们详细阐述了一种评估网络安全创新商业价值的实用方法，并提出了一种务实方案，使组织能够以结构化且可重复的方式导入创新理念。该框架旨在增强网络安全能力以应对持续演变的网络威胁态势，同时维护基础设施的完整性。通过将关注点从普适性市场吸引力转向特定行业需求，我们的框架为网络安全领导者提供了优先开展高影响力举措所需的战略网络前瞻，从而使网络安全成为核心业务赋能器而非负担。