ISMS MANAGEMENT FOR TRANSNATIONAL ORGANIZATIONS IN FRAGMENTED REGULATORY ENVIRONMENT
Authors: Maksim Iavich, Vladimer Svanadze, Ketevani Grdzelidze
Affiliation: Caucasus University, Scientific Cyber Security Association
Category:
Keywords: Internet Fragmentation; Information Security Governance; Cyber Security; RAITM Framework; IS Framework
ABSTRACT. As digital sovereignty mandates and data localization laws create an increasingly fragmented global regulatory landscape, traditional static IS governance frameworks are failing to provide the necessary agility for multi-jurisdictional operations. This paper proposes the RCA (Resilience-Compliance-Adaptability) governance model and the RAITM (Regulatory intelligence – Alignment-Implementation-Testing-Monitoring) operational life-cycle as a unified solution. BY decomposing legal statutes into machine-readable compliance components using deontic logic, the framework bridges the gap between abstract law and technical security architecture. The research introduced modular software architecture designed to operationalize the organizations resiliency through an integrated governance logic. This framework demonstrates how organizations can transition from reactive compliance to proactive strategic resilience in an increasingly partitioned digital world, regardless of their primary operational territory.
References:
DeNardis, Laura. 2020. The Internet in Everything: Freedom and Security in a World with No Off Switch. Yale University Press
Dikshit, Pratyush, Mike Kosek, Nils Faulhaber, Jayasree Sengupta, and Vaibhav Bajpai. 2024. “Evaluating DNS Resiliency and Responsiveness With Truncation, Fragmentation & DoTCP Fallback.” IEEE Transactions on Network and Service Management, ahead of print. https://doi.org/10.1109/TNSM.2024.3365303
Evinger, Jake A. 2024. “Walled Gardens & Forbidden Apples: Software Access Amid Antimonopoly Resurgence.” Richmond Journal of Law and Technology 31 (1). https://doi.org/10.2139/ssrn.4946889
Fan, Xing. 2024. “Between Fragmentation and Integration.” Maastricht University. https://doi.org/10.26481/dis.20240927xf
Fidler, Mailyn, Harvard JD Law School, and Yale Law School. 2025. Internet Fragmentation’s Outward Turn. https://www.sciencespo.fr/public/chaire-numerique/en/2025/06/01/research-paper-internet-fragmentation
Gur, Berna Akcali, and Joanna Kulesza. 2024. “Cyber Sovereignty and Space Sustainability: A Case Study of Mega-Constellations 1.” TPRC2024 – The Research Conference on Communications, Information and Internet Policy, July 30. https://papers.ssrn.com/sol3/papers.cfm?abstract_id=4910799
Kuner, Christopher. 2021. Transborder Data Flows and Data Privacy Law. Oxford University Press
Morse, Julia C. 2025. “Information Fragmentation and Global Governance in Hard Times.” Ethics and International Affairs 39 (2). https://doi.org/10.1017/S0892679425100130
Moura, Giovane C. M., Moritz Müller, Marco Davids, Maarten Wullink, and Cristian Hesselman. 2021. “Fragmentation, Truncation, and Timeouts: Are Large DNS Messages Falling to Bits?” Lecture Notes in Computer Science (Including Subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics) 12671 LNCS. https://doi.org/10.1007/978-3-030-72582-2_27
n.a. 2025. “Geopolitical and Technical Dimensions of Internet Fragmentation.” Preprint
Tanjung, Dio Febrilian, Oky Dwi Nurhayati, and Adi Wibowo. 2024. “Design Information Security in Electronic-Based Government Systems Using NIST CSF 2.0, ISO/IEC 27001: 2022 and CIS Control.” International Journal of Innovative Science and Research Technology (IJISRT), ahead of print. https://doi.org/10.38124/ijisrt/ijisrt24jun1212
UNIDIR. 2023. “Internet Fragmentation and Cybersecurity.” Preprint
Zittrain, Jonathan. 2008. The Future of the Internet and How to Stop It. Yale University Press
Menu