{"id":"https://openalex.org/W7153828062","doi":"https://doi.org/10.1016/j.cose.2026.104918","title":"Human-centered cybersecurity risk management for IT/OT-converged oil and gas operating facilities","display_name":"Human-centered cybersecurity risk management for IT/OT-converged oil and gas operating facilities","publication_year":2026,"publication_date":"2026-04-12","ids":{"openalex":"https://openalex.org/W7153828062","doi":"https://doi.org/10.1016/j.cose.2026.104918"},"language":"en","primary_location":{"id":"doi:10.1016/j.cose.2026.104918","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.cose.2026.104918","pdf_url":null,"source":{"id":"https://openalex.org/S12529635","display_name":"Computers & Security","issn_l":"0167-4048","issn":["0167-4048","1872-6208"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Computers & Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.1016/j.cose.2026.104918","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5016603860","display_name":"Huma Imran","orcid":"https://orcid.org/0009-0004-9732-4999"},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Huma Imran","raw_affiliation_strings":["xxx"],"raw_orcid":"https://orcid.org/0009-0004-9732-4999","affiliations":[{"raw_affiliation_string":"xxx","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5067846429","display_name":"Colin Turner","orcid":"https://orcid.org/0000-0002-9530-479X"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Colin Turner","raw_affiliation_strings":["xxx"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"xxx","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5108622840","display_name":"Shereen Nassar","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Shereen Nassar","raw_affiliation_strings":["xxx"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"xxx","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5133458410","display_name":"Yen Tran","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yen Tran","raw_affiliation_strings":["xxx"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"xxx","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5023257412","display_name":"Mohamed Salama","orcid":"https://orcid.org/0000-0001-5212-082X"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Mohamed Salama","raw_affiliation_strings":["xxx"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"xxx","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5016603860"],"corresponding_institution_ids":[],"apc_list":{"value":3190,"currency":"USD","value_usd":3190},"apc_paid":{"value":3190,"currency":"USD","value_usd":3190},"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.80879695,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"167","issue":null,"first_page":"104918","last_page":"104918"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11357","display_name":"Risk and Safety Analysis","score":0.21240000426769257,"subfield":{"id":"https://openalex.org/subfields/1804","display_name":"Statistics, Probability and Uncertainty"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T11357","display_name":"Risk and Safety Analysis","score":0.21240000426769257,"subfield":{"id":"https://openalex.org/subfields/1804","display_name":"Statistics, Probability and Uncertainty"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T14431","display_name":"Diverse Research and Applications","score":0.093299999833107,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10809","display_name":"Occupational Health and Safety Research","score":0.06159999966621399,"subfield":{"id":"https://openalex.org/subfields/3614","display_name":"Radiological and Ultrasound Technology"},"field":{"id":"https://openalex.org/fields/36","display_name":"Health Professions"},"domain":{"id":"https://openalex.org/domains/4","display_name":"Health Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/risk-management","display_name":"Risk management","score":0.6183000206947327},{"id":"https://openalex.org/keywords/risk-assessment","display_name":"Risk assessment","score":0.36550000309944153},{"id":"https://openalex.org/keywords/petroleum-industry","display_name":"Petroleum industry","score":0.3325999975204468},{"id":"https://openalex.org/keywords/fossil-fuel","display_name":"Fossil fuel","score":0.3203999996185303},{"id":"https://openalex.org/keywords/integrity-management","display_name":"Integrity management","score":0.2793000042438507}],"concepts":[{"id":"https://openalex.org/C32896092","wikidata":"https://www.wikidata.org/wiki/Q189447","display_name":"Risk management","level":2,"score":0.6183000206947327},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.4814999997615814},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.47609999775886536},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.4758000075817108},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.39640000462532043},{"id":"https://openalex.org/C12174686","wikidata":"https://www.wikidata.org/wiki/Q1058438","display_name":"Risk assessment","level":2,"score":0.36550000309944153},{"id":"https://openalex.org/C526740375","wikidata":"https://www.wikidata.org/wiki/Q862571","display_name":"Petroleum industry","level":2,"score":0.3325999975204468},{"id":"https://openalex.org/C68189081","wikidata":"https://www.wikidata.org/wiki/Q12748","display_name":"Fossil fuel","level":2,"score":0.3203999996185303},{"id":"https://openalex.org/C2777675914","wikidata":"https://www.wikidata.org/wiki/Q6043351","display_name":"Integrity management","level":3,"score":0.2793000042438507},{"id":"https://openalex.org/C83163435","wikidata":"https://www.wikidata.org/wiki/Q3954104","display_name":"Security management","level":2,"score":0.27720001339912415},{"id":"https://openalex.org/C2982805371","wikidata":"https://www.wikidata.org/wiki/Q104493","display_name":"Risk prevention","level":2,"score":0.2619999945163727},{"id":"https://openalex.org/C548895740","wikidata":"https://www.wikidata.org/wiki/Q22656","display_name":"Petroleum","level":2,"score":0.2567000091075897}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1016/j.cose.2026.104918","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.cose.2026.104918","pdf_url":null,"source":{"id":"https://openalex.org/S12529635","display_name":"Computers & Security","issn_l":"0167-4048","issn":["0167-4048","1872-6208"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Computers & Security","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1016/j.cose.2026.104918","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.cose.2026.104918","pdf_url":null,"source":{"id":"https://openalex.org/S12529635","display_name":"Computers & Security","issn_l":"0167-4048","issn":["0167-4048","1872-6208"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Computers & Security","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":78,"referenced_works":["https://openalex.org/W1580022002","https://openalex.org/W1582830784","https://openalex.org/W1602619638","https://openalex.org/W1944403676","https://openalex.org/W1977671923","https://openalex.org/W1980991704","https://openalex.org/W1989460911","https://openalex.org/W1990067238","https://openalex.org/W1994768711","https://openalex.org/W2002917447","https://openalex.org/W2018529939","https://openalex.org/W2038887412","https://openalex.org/W2044935933","https://openalex.org/W2048063069","https://openalex.org/W2059348446","https://openalex.org/W2061796027","https://openalex.org/W2078076646","https://openalex.org/W2096085126","https://openalex.org/W2112165762","https://openalex.org/W2137125422","https://openalex.org/W2149142614","https://openalex.org/W2170554716","https://openalex.org/W2171422629","https://openalex.org/W2174850379","https://openalex.org/W2201072802","https://openalex.org/W2221625051","https://openalex.org/W2291827691","https://openalex.org/W2507336182","https://openalex.org/W2518301630","https://openalex.org/W2521731354","https://openalex.org/W2802525389","https://openalex.org/W2805611890","https://openalex.org/W2811256013","https://openalex.org/W2890833625","https://openalex.org/W2892497869","https://openalex.org/W2912172640","https://openalex.org/W2912800036","https://openalex.org/W2914969535","https://openalex.org/W2918161214","https://openalex.org/W2928277486","https://openalex.org/W2943290406","https://openalex.org/W2956382671","https://openalex.org/W2963189267","https://openalex.org/W2978346165","https://openalex.org/W3000302391","https://openalex.org/W3011930677","https://openalex.org/W3041912091","https://openalex.org/W3125797434","https://openalex.org/W3133612569","https://openalex.org/W3134279748","https://openalex.org/W3143257057","https://openalex.org/W3164742943","https://openalex.org/W3186180747","https://openalex.org/W3187476932","https://openalex.org/W3191656082","https://openalex.org/W4200058602","https://openalex.org/W4200550507","https://openalex.org/W4233780086","https://openalex.org/W4246538835","https://openalex.org/W4251985298","https://openalex.org/W4281661231","https://openalex.org/W4281738190","https://openalex.org/W4285389279","https://openalex.org/W4312571413","https://openalex.org/W4315778741","https://openalex.org/W4322733918","https://openalex.org/W4322760831","https://openalex.org/W4323062337","https://openalex.org/W4362704894","https://openalex.org/W4385274673","https://openalex.org/W4385626989","https://openalex.org/W4390740554","https://openalex.org/W4392402174","https://openalex.org/W4392633537","https://openalex.org/W4400675308","https://openalex.org/W4400992707","https://openalex.org/W4405277431","https://openalex.org/W4410773135"],"related_works":[],"abstract_inverted_index":{"\u2022":[0,10,23,39,51],"Introduces":[1],"STS-CROP,":[2],"a":[3,14,116,146,187,269,285],"socio-technical":[4,17,47,86,156,181,272,280],"cybersecurity":[5,20,59,151],"framework":[6,149,194],"for":[7,150,260,289,297],"IT/OT":[8,290],"projects":[9,255],"Adds":[11],"\"process\"":[12],"as":[13,98],"fourth":[15],"independent":[16,271],"dimension":[18,273],"in":[19,36,71,119,155,172,310],"risk":[21,93,152,183,224,308],"governance":[22,287],"Empirically":[24],"validated":[25],"with":[26,230,244],"23":[27,169],"expert":[28,170],"interviews":[29,171],"from":[30],"the":[31,37,91,138,178,248,266],"oil":[32,72,174,252],"and":[33,43,49,55,67,73,101,111,125,159,168,175,185,208,217,220,235,241,253,256,274,299,303],"gas":[34,74,176,254],"sector":[35],"GCC":[38],"Bridges":[40],"ISO/IEC":[41,99],"27001":[42,100,234],"IEC":[44,102,236],"62443":[45,103],"through":[46,238],"integration":[48],"optimization":[50,213],"Provides":[52],"practical,":[53],"policy,":[54],"methodological":[56],"contributions":[57],"to":[58,189,215,227,251,268,306],"research":[60,163],"The":[61,192,292],"convergence":[62],"of":[63],"Information":[64],"Technology":[65,69],"(IT)":[66],"Operational":[68],"(OT)":[70],"operating":[75],"facilities":[76],"has":[77],"transformed":[78],"these":[79],"assets":[80],"into":[81],"digitally":[82],"intensive,":[83],"highly":[84],"connected":[85],"systems,":[87],"while":[88,283],"also":[89],"expanding":[90],"cyber":[92,182,223,307],"surface.":[94],"Existing":[95],"standards":[96,232],"such":[97],"prioritize":[104],"technical":[105],"safeguards":[106],"but":[107],"underplay":[108],"human,":[109],"organizational,":[110],"environmental":[112,209],"factors.":[113],"This":[114],"represents":[115],"serious":[117],"gap":[118],"critical":[120,262],"infrastructures":[121],"where":[122],"safety,":[123],"continuity,":[124],"global-local":[126],"contexts":[127],"are":[128],"tightly":[129],"coupled.":[130],"To":[131],"address":[132,190],"this":[133,135],"challenge,":[134],"paper":[136],"develops":[137],"STS-CROP":[139,278],"(Socio-Technical":[140],"Systems":[141],"Cybersecurity":[142,200],"Risk":[143],"Optimization":[144],"Process),":[145],"human-centered":[147],"process":[148,188,226,267],"management":[153,225,309],"grounded":[154],"systems":[157,281],"theory":[158,167,282],"employing":[160],"an":[161],"abductive":[162],"design.":[164],"Iterating":[165],"between":[166],"IT/OT-converged":[173],"settings,":[177],"study":[179,293],"identifies":[180],"gaps":[184],"structures":[186],"them.":[191],"proposed":[193],"comprises":[195],"three":[196],"interdependent":[197],"components:":[198],"(1)":[199],"controls":[201],"classification":[202],"system":[203],"spanning":[204],"social,":[205],"technical,":[206],"process,":[207],"dimensions;":[210],"(2)":[211],"Joint":[212],"mechanism":[214],"align":[216],"balance":[218],"controls;":[219],"(3)":[221],"Dynamic":[222],"ensure":[228],"compliance":[229],"international":[231],"(ISO/IEC":[233],"62443)":[237],"continuous":[239],"improvement":[240],"governance.":[242],"Validation":[243],"industry":[245],"practitioners":[246,298],"confirmed":[247],"framework\u2019s":[249],"applicability":[250],"suggests":[257],"broader":[258],"relevance":[259],"other":[261],"infrastructures.":[263],"By":[264],"elevating":[265],"distinct,":[270],"operationalizing":[275],"joint":[276],"optimization,":[277],"advances":[279],"offering":[284],"practical":[286],"model":[288],"cybersecurity.":[291],"provides":[294],"actionable":[295],"insights":[296],"policymakers":[300],"seeking":[301],"resilient":[302],"adaptive":[304],"approaches":[305],"converged":[311],"environments.":[312]},"counts_by_year":[],"updated_date":"2026-04-22T06:01:30.510260","created_date":"2026-04-13T00:00:00"}