## 4 Findings and Results
### Reflection on the Proposed STS Cybersecurity Challenges Model
This study extended the current STS theory by not only considering the cybersecurity challenges that emerged due to external environmental factors but also reporting these challenges due to issues in the internal environment. Finally, the framework proposed reported and classified cybersecurity challenges due to flaws in the national and global economic aspects, as well as deficiencies in the regulatory, legal, and political elements. Based on the above discussion, it can be concluded that the current study has extended the traditional STS framework, considering the cybersecurity challenges that emerged due to various shortcomings. The lines interconnecting the five subsystems show the interrelationships of these subsystems to achieve joint optimization. Joint optimization is defined as the incorporation of social and technical elements [27, 55]. For the current study, the joint optimization definition is modified and can be stated as incorporating social, technical, environmental, economic, and political elements. The outward arrows from each subsystem depict the elements of that subsystem. A different color denotes each subsystem. The current proposed framework has filled identified research gaps and extended the framework, as shown in Table 6. \begin{table}
\begin{tabular}{p{113.8 pt} p{113.8 pt} p{113.8 pt} p{113.8 pt} p{113.8 pt} p{113.8 pt}} \hline
**Reference Aim** & **Industry** & **Methodology** & **Participants** & **Gaps Identified** \\ \hline
[59] & The paper presents a human approach where the individual, organizational, and technological factors are investigated and reveal how they impact cybersecurity risks & Healthcare & Qualitative & Management, and IT experts & The paper focuses more on the human factor as compared with other STS dimensions. Also, the study’s results are from different industries. \\ \hline
[37] & The paper systematically reviewed sociotechnical cybersecurity metrics and investigated the issue in small and medium enterprises. & Small and medium enterprise & Systematic literature review & Secondary data & The paper lacks empirical evidence and is a conceptual literature review. Also, the type of industry and unit of analysis is different from the current study. \\ \hline
[60] & The paper reviews and examines the sociocultural dynamics of transportation in the COVID-19 crisis and how it impacts carbon efficiency in transportation. & Transportation review & Systematic literature review & Secondary data & The study uses sociotechnical factors from a different perspective rather than considering cybersecurity challenges in a major crisis. \\ \hline
[36] & The study validates management process that identifies organizational sociotechnical security gaps in existing enterprise systems security frameworks. & Not specified & Qualitative & Practitioners & The study’s focus is on identifying security gaps in current cybersecurity frameworks instead of using STS theory to outline cybersecurity challenges. Also, the study has not specified the type of industry practitioners. \\ \hline
[16] & STS approach is used to build a simulation-based teaching tool in the ICT ecosystem, towards cybersecurity. & Higher education & quantitative & students & The study does not address cybersecurity challenges due to human errors. Also, the unit of analysis is students, and the study is not focused on cybersecurity issues in major crisis. \\ \hline
[34] & The study investigates and maps behavioral patterns to sociotechnical risks factors and shows how specific behaviors have the potential to push an organization’s working practices across its security boundaries. & Not specified & Qualitative & Not specified & The study’s focus is on exploring behavioral patterns using STS theory and other risk factors. Also, the study lacks a specifying explanation about the type of participants and industry. \\ \hline \end{tabular}
\end{table} 
Table 5: Summary of the cybersecurity and STS studies.