Evaluating human-centric cybersecurity risks in the manufacturing industry

With rapidly developing technology and digitalisation, the importance of cybersecurity is increasing, underlining the importance of human-centric cybersecurity risks, especially in the manufacturing industry. This study aims to reveal the sector's human-centric cybersecurity risks due to the manufacturing industry's complex processes and continuity-based structure. In this study, eight risks were identified and evaluated using the fuzzy CRITIC method. This study identified the top three human-centric cybersecurity risks in the manufacturing industry as follows: 'employee resistance to cybersecurity practices and data privacy', 'lack of employee training and education on cybersecurity' and 'lack of human-machine integration'. This comprehensive analysis of human-centric cybersecurity risks in the manufacturing industry highlights the need for cybersecurity strategies to include human-centric measures. The results suggest that managers, security professionals, and practitioners develop an effective combat strategy against human-centric cybersecurity risks in the manufacturing industry. [Submitted 28 March 2024; Accepted 3 September 2024]