Cyber Resilience of Transport Infrastructure in the Era of Hybrid Threats: A Security Management Model
Purpose: The aim of this article is to analyse contemporary cyber threats affecting transport infrastructure and to identify the key organisational, technological and legal factors influencing the strengthening of its cyber resilience. A further aim is to develop an original model to strengthen the cyber resilience of transport infrastructure, taking into account contemporary security management standards and the requirements of applicable regulations. Design/Methodology/Approach: The study employed critical analysis and synthesis of academic literature, analysis of legal acts, norms, and standards in the field of cybersecurity, and analysis of reports on contemporary cyber threats. A comparative method and a conceptual modelling method were also employed, resulting in an original model for strengthening the cyber resilience of transport infrastructure. The research question was formulated as follows: What organisational, technological, and legal measures are key to strengthening the cyber resilience of transport infrastructure in the context of contemporary cyber threats? The research hypothesis posits that effectively strengthening the cyber resilience of transport infrastructure requires an integrated approach encompassing risk management, the implementation of modern security technologies, the development of staff competencies, and cooperation between infrastructure operators and entities responsible for cyberspace security. Results (Findings): The analysis showed that the increasing digitalisation of transport heightens the infrastructure’s vulnerability to cyber threats, particularly ransomware attacks, threats to OT/ICS systems, supply chain attacks, and hybrid operations. At the same time, it was found that building cyber resilience effectively requires a comprehensive approach encompassing risk identification, preventive measures, continuous monitoring, effective incident response, and the systematic improvement of security processes. The proposed model constitutes a coherent framework for managing transport infrastructure cybersecurity. Practical Implications: The results presented in this article can be utilised by transport infrastructure operators, TSL sector enterprises, public administration and entities responsible for the protection of critical infrastructure when designing and improving cybersecurity management systems. The developed model can support risk assessment, the planning of preventive measures, and the building of organisational resilience in accordance with the requirements of the NIS2 Directive and international security standards. Originality/Value: The value of this article lies in the development of an original model for strengthening the cyber resilience of transport infrastructure, integrating organisational, technological and legal aspects. The model structures the cybersecurity management process in the transport sector and may serve as a reference point for both further academic research and practical measures undertaken by organisations responsible for operating transport infrastructure.