Analyzing and Categorizing Emerging Cybersecurity Regulations
Author(s)
Marotta, Angelica
Madnick, Stuart
Date Issued
September 8, 2025
Journal
ACM Computing Surveys
Publisher
Association for Computing Machinery
Citation
Angelica Marotta and Stuart Madnick. 2025. Analyzing and Categorizing Emerging Cybersecurity Regulations. ACM Comput. Surv. 58, 2, Article 51 (January 2026), 36 pages.
Version
Final published version
Abstract
As cyber-attacks become more frequent, sophisticated, and impactful, governments worldwide are responding by introducing or proposing new cybersecurity regulations. This paper examines over 170 recent regulations and trends in cybersecurity across various regions, including the United States, Europe, and beyond. It identifies 17 key features in many of these regulations, which we have grouped into 5 categories, analyzes observed patterns, and proposes areas for improvement. This paper's primary objective is to significantly contribute to the cybersecurity compliance domain by helping researchers understand the structure of these regulations and helping organizations to assess and mitigate their cyber risk within an increasingly complex and regulated cybersecurity environment. Our findings provide valuable direction to those trying to navigate the flood of new cybersecurity regulations and the governments enacting new cybersecurity regulations.
MIT Department
Sloan School of Management
Terms of Use
Creative Commons Attribution
Persistent DSpace Link
DOI of Published Version
https://doi.org/10.1145/3757318
