GIS security incident management: practical approaches and standards

• Autorzy: Kiedrowicz Maciej

Identyfikatory

DOI

10.57599/gisoj.2025.5.1.59

• Języki publikacji: EN

Abstrakty

EN

In the face of growing cyber threats, security incident management in GIS (Geographic Information Systems) systems is becoming a key element in ensuring the integrity and availability of spatial data. The aim of this article is to analyze practical approaches to security incident management in GIS systems and to assess compliance with international standards. The study used real-life incident case analysis methods, a literature review and interviews with industry experts. The results point to the need for integrated incident management procedures that include monitoring, detection, response and incident reporting. In addition, compliance with ISO 27001, ISO 19115 and OGC (Open Geospatial Consortium) standards is crucial for effective spatial data security management. The article ends with recommendations for the implementation of best practices and proposals for further research in the area of security incident management in GIS systems.

Słowa kluczowe

EN

incident management; cybersecurity; GIS systems; compliance standards; cyber threats

PL

zarządzanie incydentami; cyberbezpieczeństwo; systemy GIS; standardy zgodności; zagrożenia cybernetyczne

• Wydawca: SILGIS Association ; Croatian-Polish Scientific Network
• Czasopismo: GIS Odyssey Journal
• Rocznik: 2025
• Tom: Vol. 5, no. 1
• Strony: 59--67
• Opis fizyczny: Bibliogr. 21 poz.

Twórcy

autor

Kiedrowicz Maciej

• Military University of Technology, Faculty of Cybernetics, Warsaw, Poland,

• https://orcid.org/0000-0002-4389-0774

Bibliografia

• 1. CISA (2023). Geographic Information System Lifecycle Best Practices Guide, CISA. https://www.cisa.gov/sites/default/files/2023-02/20 0922 SAFECOM- NCSWIC GIS Lifecycle Best Practices Guide FINAL 508c.pdf [access: 16.01.2025].
• 2. CISA (2024). Cybersecurity and Infrastructure Security Agency Annual Report, CISA. https://www.cisa.gov/sites/default/files/2024-12/CSAC%20Annual%2OReport 20241210.pdf [access: 16.01.2025].
• 3. DeMers M.N. (2008). Fundamentals of Geographic Information Systems. Wiley. 4th edition.
• 4. FEMA (2025). The Federal Emergency Management Agency (FEMA), National Incident Management System (NIMS), Department of Homeland Security, https://www.fema.gov/emergency-managers/nims [access: 16.01.2025].
• 5. EEA Report (2024). European Environment Agency - Trends and projections in Europe 2024. DOI:1O.280O/7574O66
• 6. ESRI (2025). What is GIS? Geographic Information System (GIS), Esri. https://www.esri.com/pl-pl/what-is-gis/overview [access: 06.02.2025].
• 7. ISO-ArcGIS (2025). ISO-ArcGIS Trust Center, Documentation. https://trust.arcgis.com/en/compliance/iso-information.htm [access: 11.01.2025].
• 8. HAZUS (2025). FEMA’s Hazus Program - GIS-Based Software for Estimating Potential Losses from Disasters, Federal Emergency Management Agency. https://www.fema.gov/flood-maps/products-tools/hazus [access: 11.01.2025].
• 9. IPCC (2025). Intergovernmental Panel on Climate Change Assessment Reports, IPCC. https://www.ipcc.ch/assessment-report/ar6/ [access: 11.01.2025].
• 10. ISO (2014). ISO 19115-1:2014 - Geographic information - Metadata Part 1: Fundamentals, ISO. https://www.iso.org/standard/53798.html [access: 11.01.2025].
• 11. Simpson C. (2024). JRC Highlights Report 2023. In: I. Bonjean, M. Fornara, K. Jonkers, T. Klaassen, S. Lehto, L. Soldatova, J. Thielen Del Pozo, M. Westra Van Holthe (ed.), Publications Office of the European Union, Luxembourg. JRC136884. doi:10.2760/947345.
• 12. Lanclos R., Artz M. (2021). Dealing with Disasters: GIS for Emergency Management. Esri Press.
• 13. NIST (2012). NIST Special Publication 800-61 Revision 2: Computer Security Incident Handling Guide. P. Cichonski, T. Millar, T. Grance, K. Scarfone (recommendations). http://dx.doi.org/10.6028/NIST.SP.800-61r2.
• 14. Singh R. (2024) The role of geographic information systems (GIS) in disaster management and planning. International Journal of Geography, Geology and Environment, vol. 6, no. 2, pp. 195-205. DOI: 1022271/27067483J024v6J2c^
• 15. Tomaszewski B., Judex M., Szarzynski J., Radestock C. Wirkus L. (2015). Geographic Information Systems for Disaster Response: A Review. Journal of Homeland Security and Emergency Management, vol. 12, no. 3, pp. 571-602. https://doi.org/10.1515/jhsem-2014-0082.
• 16. Tomaszewski B. (2020). Geographic Information Systems (GIS) for Disaster Management. 2nd ed. Taylor and Francis. https://www.perlego.com/book/1899960/geographic- information-systems-gis-for-disaster-management-pdf [access: 15 January 2025].
• 17. UNDRR (2025). United Nations Office for Disaster Risk Reduction, Global Assessment Report on Disaster Risk Reduction. https://www.undrr.org/gar [access: 15.01.2025].
• 18. USGS (2025). United States Geological Survey Annual Reports, USGS. https://www.usgs.gov [access: 15.01.2025].
• 19. Wei H.L. (2021). Geographic Information Systems (GIS) Applications in Emergency Management. In: L.R. Shapiro, M.H. Maras, (ed.), Encyclopedia of Security and Emergency Management. Springer, Cham. https://doi.org/10.1007/978-3-319- 70488-3 13.
• 20. Werner P. (2018). Czy GIS podnosi rangę dyscyplin geograficznych? Znaczenie GIS i GIScience dla geografii (Does GIS raise the profile of geographical disciplines? The importance of GIS and GIScience for geography). Acta Universitatis Lodziensis, no. 34. DOI: https://doi.org/10.18778/1508-1117.34.01.
• 21. Zhu X. (2016). GIS for Environmental Applications: A practical approach, 1st ed. Routledge. https://doi.org/10.4324/9780203383124.

Uwagi

Opracowanie rekordu ze środków MNiSW, umowa nr POPUL/SP/0154/2024/02 w ramach programu "Społeczna odpowiedzialność nauki II" - moduł: Popularyzacja nauki (2025).