Abstract
This study addresses the need for resilient critical‑infrastructure protection amid rapid digital transformation. While technological advances improve efficiency and connectivity, they also introduce complex cybersecurity and privacy risks. To overcome fragmented treatments of cybersecurity and cyberprivacy, we employ a multidisciplinary, interpretative approach grounded in socio‑technical systems theory to develop a unified framework synthesizing models, standards, and strategies across governance, risk analysis, socio‑technical factors, interdependencies, cyberprivacy and data governance, protection and mitigation, and evaluation and continuous improvement. Theoretically, it bridges technical controls and organizational behavior; practically, it offers a holistic basis for risk management and adaptable protection strategies. Although developed using the energy sector as a reference, the framework’s abstraction supports cross‑sector application.
Paper Type
Poster
DOI
10.62036/ISD.2026.159
Toward a Holistic Socio‑Technical Framework for Critical Infrastructure Cybersecurity and Privacy Protection: Insights from Smart Grids
This study addresses the need for resilient critical‑infrastructure protection amid rapid digital transformation. While technological advances improve efficiency and connectivity, they also introduce complex cybersecurity and privacy risks. To overcome fragmented treatments of cybersecurity and cyberprivacy, we employ a multidisciplinary, interpretative approach grounded in socio‑technical systems theory to develop a unified framework synthesizing models, standards, and strategies across governance, risk analysis, socio‑technical factors, interdependencies, cyberprivacy and data governance, protection and mitigation, and evaluation and continuous improvement. Theoretically, it bridges technical controls and organizational behavior; practically, it offers a holistic basis for risk management and adaptable protection strategies. Although developed using the energy sector as a reference, the framework’s abstraction supports cross‑sector application.
Recommended Citation
Eltahawy, B., Dang, D. & Vartiainen, T.(2026). Toward a Holistic Socio‑Technical Framework for Critical Infrastructure Cybersecurity and Privacy Protection: Insights from Smart Grids. In M. Valenta, B. Mannová, R. Pergl, A. Przybylek, M. Lang, H. Linger, C. Schneider, N. Iivari, & E. Insfran (Eds.), Making ISD Sustainable: Reloaded with AI and Automation (ISD2026 Proceedings). Prague, Czech Republic: Czech Technical University in Prague. ISBN: 978-80-01-07585-2. https://doi.org/10.62036/ISD.2026.159