Cybersecurity workforce in railway: its maturity and awareness

PurposeThe purpose of this research paper is to evaluate and estimate the cybersecurity maturity and awareness risk for workforce management in railway transportation by using Railway-Cybersecurity Capability Maturity Model (R-C2M2) and Information Security Awareness Capability Model (ISACM), respectively.Design/methodology/approachThis research uses a case study strategy, so primary data comprise the majority of data collected. These data were collected through interviews and questionnaires. The secondary data were collected from the literature, technical reports and standards.FindingsThe results show that there is a gap in cybersecurity awareness within the workforce and there is a need to improve this gap. This paper provides some of the recommendations and literature to enhance cybersecurity workforce culture within railway organizations.Practical implicationsIn this paper, the authors have demonstrated that cybersecurity awareness has positive impact on the overall dependability of the railway system.Originality/valueThis paper describes the importance of cybersecurity awareness and training in building more cyber resiliency across the operation and maintenance of railway.