Sustainability Through Information Security : ESG × Information Security Integration and the Strategic Stability Index [ SSi. ]

Digital transformation has changed not only how organisations are governed but the nature of risk itself: information has become strategic capital, and its compromise carries direct consequences for sustainability, trust and long-term value. This study examines the convergence of the ESG framework (CSRD/ESRS) and information security (NIS2, DORA, GDPR, eIDAS2) as a single plane of risk governance and sustainability, and demonstrates how ESG × InfoSec integration creates added value and strengthens the strategic stability of organisations.

The study develops the Strategic Stability Index [ SSi. ] — a composite management instrument combining security maturity of the control environment, ESG performance and data integrity, and operational resilience on a standardised 0–100 scale fed by auditable KPIs. Methodologically, it combines semi-structured expert interviews (fully anonymised) with documentary analysis of confirmed ESG × information-security cases in Bulgaria and the European Union (2019–2025), and maps ESRS reporting requirements onto ISO/IEC 27001 and NIST CSF 2.0 controls.

Three contributions result: a conceptual model of ESG–InfoSec synergy; the [ SSi. ] methodology with threshold-based governance; and a governance roadmap including an integrated ESG & Cyber Committee and a joint risk register.

Language of the text: Bulgarian. Author's edition of a master's thesis completed at Sofia University “St. Kliment Ohridski”, Faculty of Economics and Business Administration, MA programme "Responsible and Sustainable Governance" (November 2025).

Conflict of interest: the author is the founder of Aasfor., an information-security and AI-governance consultancy, and develops the Strategic Stability Index [ SSi. ]. Its calibration parameters are proprietary and are not published in this edition.

Research integrity and use of AI: see the author's statement at aasfor.com/research.