International Journal For Multidisciplinary Research

E-ISSN: 2582-2160     Impact Factor: 9.24

A Widely Indexed Open Access Peer Reviewed Multidisciplinary Bi-monthly Scholarly International Journal

Call for Paper Volume 8, Issue 2 (March-April 2026) Submit your research before last 3 days of April to publish your research paper in the issue of March-April.

Human Factor Vulnerabilities in Energy Industry Cybersecurity: Assessing Employee Awareness and Behavior in Breach Prevention

Author(s) Nasiru Hutchful, Benjamin Panful, Barnabas Apaflo, Abimbola Filani, Kenneth Nnadi
Country United States
Abstract Cyberattacks are a prime focus on the energy sector, and employees are typically identified as the weakest link. This is a systematic literature review (SLR) that has identified 103 studies, using “(“cybersecurity” OR “information security”) AND (“energy industry” OR “power sector” OR “oil and gas” OR “utilities” OR “critical infrastructure”) AND (“human factor” OR “employee behavior” OR “awareness” OR “insider threat” OR “phishing” OR “social engineering”)” as search keywords across academic databases, 40 of which are included in the further analysis and synthesis in accordance with PRISMA guidelines. The review lists six common human factor vulnerabilities, including: awareness and training vulnerabilities, insider vulnerabilities and negligence, social engineering and phishing, compliance vulnerabilities and policy compliance, organizational culture, and ICS/SCADA-specific vulnerabilities. Results confirm that although technical precautions are essential, human actions, lack of compliance, and insufficient knowledge are most often exploited during breaches. Cultural and motivational factors also strongly influence security outcomes. The analysis identifies the gaps on long term training effectiveness, the realization of the security culture that was carried out to date, and the incorporation of human-based actions to technical systems. The review summarizes the scattered knowledge and offers a systematic approach to managing the risks posed by employees in cybersecurity of energy industries.
Field Computer > Data / Information
Published In Volume 7, Issue 6, November-December 2025
Published On 2025-12-26
DOI https://doi.org/10.36948/ijfmr.2025.v07i06.63932

Share this