Strengths and Knowledge Gaps Identified From Cybersecurity Education and Training Programs, and the Implications for Operational Technology Personnel in Critical Infrastructures: A Scoping Review
Critical infrastructures, such as energy or water management, provide services that are essential to society’s function. With the advent of digitalization and Industry 4.0, these infrastructures have transitioned from offline, self-contained systems to digitally interconnected networks. W...
Saved in:
| Main Authors: | , , , |
|---|---|
| Format: | Article |
| Language: | English |
| Published: |
IEEE
2025-01-01
|
| Series: | IEEE Access |
| Subjects: | |
| Online Access: | https://ieeexplore.ieee.org/document/11104227/ |
| Tags: |
Add Tag
No Tags, Be the first to tag this record!
|
| _version_ | 1849389910332538880 |
|---|---|
| author | Leanne Noelle Strom Torgersen Elizabeth Rebecca Noble Torvald Fossaen Ask Benjamin J. Knox |
| author_facet | Leanne Noelle Strom Torgersen Elizabeth Rebecca Noble Torvald Fossaen Ask Benjamin J. Knox |
| author_sort | Leanne Noelle Strom Torgersen |
| collection | DOAJ |
| description | Critical infrastructures, such as energy or water management, provide services that are essential to society’s function. With the advent of digitalization and Industry 4.0, these infrastructures have transitioned from offline, self-contained systems to digitally interconnected networks. While these advancements have streamlined operations, they have also left critical infrastructures vulnerable to cyber threats. Training all users, including non-technical personnel, in cybersecurity is crucial to safeguard these systems. However, current trainings primarily focus on information technology personnel rather than addressing the needs of non-information technology personnel such as operational technology. This scoping review aimed to address this gap by systematically mapping the available academic literature on cybersecurity education and training programs, particularly focusing on operational technology. The objectives were to identify what different training tools and approaches existed, what knowledge gaps from published literature remained, and what were the potential facilitators and barriers with developing cybersecurity trainings tailored for operational technology environments. Following the JBI methodology, 837 articles were retrieved from 8 databases, with 132 articles included in the final analysis. 39 studies specifically targeted operational technology. The results showed several studies utilized active learning approaches including testbeds, simulations, and gamification. There was, however, a lack of consistent application of performance measurements, with 9 papers specifying self-efficacy as a performance measure. From mapping facilitators, the review presents that, through a co-creative process, tailored cybersecurity education and training programs can be developed to address the needs of operational technology, in turn contributing to the overall cyber-resilience of organizations through increased self-efficacy of personnel. |
| format | Article |
| id | doaj-art-594021e26ec649c6aef40e8e61530a49 |
| institution | Kabale University |
| issn | 2169-3536 |
| language | English |
| publishDate | 2025-01-01 |
| publisher | IEEE |
| record_format | Article |
| series | IEEE Access |
| spelling | doaj-art-594021e26ec649c6aef40e8e61530a492025-08-20T03:41:49ZengIEEEIEEE Access2169-35362025-01-011313826513831210.1109/ACCESS.2025.359404511104227Strengths and Knowledge Gaps Identified From Cybersecurity Education and Training Programs, and the Implications for Operational Technology Personnel in Critical Infrastructures: A Scoping ReviewLeanne Noelle Strom Torgersen0https://orcid.org/0000-0002-9069-4266Elizabeth Rebecca Noble1https://orcid.org/0009-0005-2239-413XTorvald Fossaen Ask2https://orcid.org/0000-0002-1907-0004Benjamin J. Knox3https://orcid.org/0000-0002-4540-9534Faculty of Health, Welfare and Organization, Østfold University College, Halden, NorwayFaculty of Health, Welfare and Organization, Østfold University College, Halden, NorwayFaculty of Health, Welfare and Organization, Østfold University College, Halden, NorwayFaculty of Health, Welfare and Organization, Østfold University College, Halden, NorwayCritical infrastructures, such as energy or water management, provide services that are essential to society’s function. With the advent of digitalization and Industry 4.0, these infrastructures have transitioned from offline, self-contained systems to digitally interconnected networks. While these advancements have streamlined operations, they have also left critical infrastructures vulnerable to cyber threats. Training all users, including non-technical personnel, in cybersecurity is crucial to safeguard these systems. However, current trainings primarily focus on information technology personnel rather than addressing the needs of non-information technology personnel such as operational technology. This scoping review aimed to address this gap by systematically mapping the available academic literature on cybersecurity education and training programs, particularly focusing on operational technology. The objectives were to identify what different training tools and approaches existed, what knowledge gaps from published literature remained, and what were the potential facilitators and barriers with developing cybersecurity trainings tailored for operational technology environments. Following the JBI methodology, 837 articles were retrieved from 8 databases, with 132 articles included in the final analysis. 39 studies specifically targeted operational technology. The results showed several studies utilized active learning approaches including testbeds, simulations, and gamification. There was, however, a lack of consistent application of performance measurements, with 9 papers specifying self-efficacy as a performance measure. From mapping facilitators, the review presents that, through a co-creative process, tailored cybersecurity education and training programs can be developed to address the needs of operational technology, in turn contributing to the overall cyber-resilience of organizations through increased self-efficacy of personnel.https://ieeexplore.ieee.org/document/11104227/Operational technologycritical infrastructurecybersecurity training and educationhuman factorsfacilitators and barriers to learningcybersecurity performance metrics |
| spellingShingle | Leanne Noelle Strom Torgersen Elizabeth Rebecca Noble Torvald Fossaen Ask Benjamin J. Knox Strengths and Knowledge Gaps Identified From Cybersecurity Education and Training Programs, and the Implications for Operational Technology Personnel in Critical Infrastructures: A Scoping Review IEEE Access Operational technology critical infrastructure cybersecurity training and education human factors facilitators and barriers to learning cybersecurity performance metrics |
| title | Strengths and Knowledge Gaps Identified From Cybersecurity Education and Training Programs, and the Implications for Operational Technology Personnel in Critical Infrastructures: A Scoping Review |
| title_full | Strengths and Knowledge Gaps Identified From Cybersecurity Education and Training Programs, and the Implications for Operational Technology Personnel in Critical Infrastructures: A Scoping Review |
| title_fullStr | Strengths and Knowledge Gaps Identified From Cybersecurity Education and Training Programs, and the Implications for Operational Technology Personnel in Critical Infrastructures: A Scoping Review |
| title_full_unstemmed | Strengths and Knowledge Gaps Identified From Cybersecurity Education and Training Programs, and the Implications for Operational Technology Personnel in Critical Infrastructures: A Scoping Review |
| title_short | Strengths and Knowledge Gaps Identified From Cybersecurity Education and Training Programs, and the Implications for Operational Technology Personnel in Critical Infrastructures: A Scoping Review |
| title_sort | strengths and knowledge gaps identified from cybersecurity education and training programs and the implications for operational technology personnel in critical infrastructures a scoping review |
| topic | Operational technology critical infrastructure cybersecurity training and education human factors facilitators and barriers to learning cybersecurity performance metrics |
| url | https://ieeexplore.ieee.org/document/11104227/ |
| work_keys_str_mv | AT leannenoellestromtorgersen strengthsandknowledgegapsidentifiedfromcybersecurityeducationandtrainingprogramsandtheimplicationsforoperationaltechnologypersonnelincriticalinfrastructuresascopingreview AT elizabethrebeccanoble strengthsandknowledgegapsidentifiedfromcybersecurityeducationandtrainingprogramsandtheimplicationsforoperationaltechnologypersonnelincriticalinfrastructuresascopingreview AT torvaldfossaenask strengthsandknowledgegapsidentifiedfromcybersecurityeducationandtrainingprogramsandtheimplicationsforoperationaltechnologypersonnelincriticalinfrastructuresascopingreview AT benjaminjknox strengthsandknowledgegapsidentifiedfromcybersecurityeducationandtrainingprogramsandtheimplicationsforoperationaltechnologypersonnelincriticalinfrastructuresascopingreview |