Organisations of all sizes are increasingly using emerging technologies like Artificial Intelligence (AI) and the Internet of Things (IoT) to enhance effectiveness [1, 2], fostering innovation and economic growth [3, 4]. However, it is leading to increasing human factor vulnerabilities exposure and now necessitating a move to an integrated human-centric approach involving security, sustainability assurance and safety to transform humans from the perceived weakest link to the strongest [5, 6].
Based on Riley’s 2014 cyber terrain operational stack (CTOS) [9], this paper uses case studies to develop and combine an integrated human-centric view with an algorithmic-centric risk management methodology for a hybrid approach in cyber-physical environments. This methodology builds on from the original security triad's evolution [10] and aligns with potential new Security, Sustainability, Assurance and Safety (S2AS) risk management atomic attributes, providing an integrated framework for managing risks in cyber-physical ecosystems.
The proposed integrated risk management framework potentially can be associated with the UN Sustainable Development Goals (SDGs), linking S2AS risk atomic attributes to identify potential risks and mitigation strategies. This could support fostering inclusive employment, technological innovation, and responsible consumption via AI and IoT for organisations [3].