Cybersecurity and Resilience: Integrating Human Factors Into Critical Systems

Abstract

To err is human. Thus, 'human errors' are not always dramatic but can have severe repercussions. Minimizing mistakes should start at the organizational culture level and involve implementing systematic measures to enhance preventability, reducing uncertainty regarding basic, complex, and intelligent failures. Unequal development across different critical infrastructure components indicates both gaps and opportunities. The latter can arise from transmitting and adapting the best ongoing and prospective tools for lagging sectors. Integrating human factors into critical systems should include a comprehensive suite of psychological safety measures, operational tools, and standards. The levels of adaptation and development of human factors vary across critical systems, including digital, energy, transportation, aviation, industry, food, buildings, healthcare, finance, and education. This variation is supported by the 'Lessons Learned' approach, ISO standards, and NIST guidelines.