Review of the impact of organizational and human factors on cyber security risk management

The increasing reliance on Information and Communication Technologies [ICTs] in critical infrastructure has elevated the susceptibility of systems to cyber threats. While technology-driven solutions were previously prioritized, recent research underscores the need for a comprehensive approach acknowledging non-technical dimensions. This review delves into the influence of organizational and human factors on cyber security risk management, exploring elements like organizational culture, leadership roles, and employee behavior. Adopting a systematic methodology, the study amalgamates empirical and theoretical articles to identify key themes, insights, and gaps in existing literature. Emphasizing the pivotal interplay between organizational context and individual behaviors, it advocates for a holistic approach in fortifying against evolving cyber threats.