A Conceptual Framework to Illustrate Cybersecurity Workforce Gaps and the Resilience of Critical Digital Infrastructure—A Multi-Sector Case Study

Abstract

This study examines how cybersecurity workforce shortages undermine the resilience of critical digital infrastructure, with emphasis on the energy sector and comparisons to finance, transportation, and telecommunications. It reframes the skills gap as a systemic risk that weakens organizations’ capacity to prevent, manage, and recover from cyber incidents. Using a two‑phase qualitative approach—a PRISMA-guided literature review (n = 70) and multi‑sector case studies (n = 5) based on 22 interviews—the analysis draws on socio‑technical systems theory. Findings show that resilience is limited less by missing technical controls than by a lack of hybrid professionals who can bridge Information Technology (IT), Operational Technology (OT) and Artificial Intelligence domains. Shortages slow incident response, impede risk communication, and reduce coordination. The study concludes that workforce capability is central to infrastructure resilience, requiring sector-aligned training, interdisciplinary collaboration, and continuous upskilling. Policy measures should support cross‑sector training and educational reform. Limitations include the small qualitative sample, suggesting future global and AI‑human studies.