Critical Infrastructure Fails Not From Bad Tech, But From Workforce Gaps
A new study of energy, finance, and transportation sectors reveals that cyber attacks succeed because companies lack hybrid professionals who understand both IT and operational systems—not because security controls are missing. This workforce shortage has become a direct threat to national infrastructure resilience, demanding urgent changes to hiring and training practices.
Originaltitel: A Conceptual Framework to Illustrate Cybersecurity Workforce Gaps and the Resilience of Critical Digital Infrastructure: A Multi-Sector Case Study
<p>This study examines how cybersecurity workforce shortages undermine the resilience of critical digital infrastructure, with emphasis on the energy sector and comparisons to finance, transportation, and telecommunications. It reframes the skills gap as a systemic risk that weakens organizations’ capacity to prevent, manage, and recover from cyber incidents. Using a two‑phase qualitative approach—a PRISMA-guided literature review (n = 70) and multi‑sector case studies (n = 5) based on 22 interviews—the analysis draws on socio‑technical systems theory. Findings show that resilience is limited less by missing technical controls than by a lack of hybrid professionals who can bridge Information Technology (IT), Operational Technology (OT) and Artificial Intelligence domains. Shortages slow incident response, impede risk communication, and reduce coordination. The study concludes that workforce capability is central to infrastructure resilience, requiring sector-aligned training, interdisciplinary collaboration, and continuous upskilling. Policy measures should support cross‑sector training and educational reform. Limitations include the small qualitative sample, suggesting future global and AI‑human studies.</p>