The digital transformation of healthcare has introduced significant cybersecurity risks, with the Australian healthcare sector being a primary target for cyberattacks. This study investigates the human and organizational dynamics influencing responses to cybersecurity incidents in the post-pandemic era. By conducting a scoping review of 81 grey literature sources, this research highlights the critical role of human behavior and organizational strategies in mitigating cyber threats. Key findings reveal that human errors, inadequate cybersecurity awareness, and organizational challenges—such as weak governance, resource limitations, and inconsistent policy enforcement—are significant contributors to cybersecurity incidents. The reliance on outdated systems and insufficient third-party vendor oversight further exacerbate vulnerabilities. The study identifies the need for integrated frameworks that foster cyber-aware cultures, strengthen leadership engagement, and enhance technical safeguards. Results emphasize the importance of proactive staff training, robust incident response playbooks, and proactive security cultures to address the evolving threat landscape. While grey literature provided practical and timely insights, the study acknowledges limitations in the depth and comprehensiveness of publicly reported incidents. The findings offer actionable recommendations for healthcare providers and cybersecurity practitioners to build organizational resilience and socio-technical integration. By addressing human and organizational factors, this study contributes to the development of holistic cybersecurity strategies that safeguard sensitive healthcare data and ensure operational continuity in an increasingly digitized healthcare ecosystem.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Human and Organizational Dynamics in Responding to Cybersecurity Incidents: Lessons from the Australian Healthcare Sector

  • Hafsa Binte Umar,
  • Tafheem Ahmad Wani,
  • Michael Liem,
  • Urooj Raza Khan,
  • James Boyd

摘要

The digital transformation of healthcare has introduced significant cybersecurity risks, with the Australian healthcare sector being a primary target for cyberattacks. This study investigates the human and organizational dynamics influencing responses to cybersecurity incidents in the post-pandemic era. By conducting a scoping review of 81 grey literature sources, this research highlights the critical role of human behavior and organizational strategies in mitigating cyber threats. Key findings reveal that human errors, inadequate cybersecurity awareness, and organizational challenges—such as weak governance, resource limitations, and inconsistent policy enforcement—are significant contributors to cybersecurity incidents. The reliance on outdated systems and insufficient third-party vendor oversight further exacerbate vulnerabilities. The study identifies the need for integrated frameworks that foster cyber-aware cultures, strengthen leadership engagement, and enhance technical safeguards. Results emphasize the importance of proactive staff training, robust incident response playbooks, and proactive security cultures to address the evolving threat landscape. While grey literature provided practical and timely insights, the study acknowledges limitations in the depth and comprehensiveness of publicly reported incidents. The findings offer actionable recommendations for healthcare providers and cybersecurity practitioners to build organizational resilience and socio-technical integration. By addressing human and organizational factors, this study contributes to the development of holistic cybersecurity strategies that safeguard sensitive healthcare data and ensure operational continuity in an increasingly digitized healthcare ecosystem.