## 2 Literature Review
### STS Theory and Cybersecurity  
The STS theory incorporates both social and technical elements [22; 23]. Joint optimization of human and technical components is the ultimate goal of the STS theory. The STS theory helps determine solutions for substantial problems occurring in an organization, including cybersecurity issues. STS theory encourages organizations to consider the joint optimization of social and technical elements [24]. The technical system refers to processes, tasks, and technology required to change inputs to outputs, and the social system refers to attitudes, skills, knowledge, and relationships among people. In STS theory, complete system integration and the integration between routine tasks performed by employees and technical aspects are classified [25]. Assimilation of both social and technological dimensions plays a significant role in improving overall performance [24]. STS comprises humans applying technology solutions to execute work activities through procedures and practices to achieve ultimate organizational goals [24; 26]. A hexagonal STS framework consisting of people, technology, infrastructure, processes, goals, and culture as significant elements has been proposed in the literature, as shown in Figure 1[27; 28; 29]. Moreover, STS system theory has previously been used in implementing technology changes [30], users' roles in understanding new technology, and implementing them with the existing social systems [23; 31] to reflect technology-led challenges based on STS principles [32] and designing of the National Health Service Programme for Information Technology [29; 33]. However, STS theory has not been previously used to report cybersecurity challenges that exclusively emerged amidst any major crisis. \begin{table}
\begin{tabular}{p{113.8 pt} p{113.8 pt} p{113.8 pt}} \hline \hline
**References** & **Description** & **Cybersecurity Challenges** \\ \hline
[19] & The study highlights ten cybersecurity threats during COVID-19, which various organizations have reported from several sectors. & Distributed Denial of Server (DDoS), Malicious attacks, Ransomware, Spam emails, Mobile and Browsing Apps \\ \hline
[20] & The conceptual paper highlights cybersecurity challenges in the health sector during the COVID-19 crisis and strategies to deal with these challenges. & Ransomware, Data breaches, Insecure devices \\ \hline
[9] & The paper categorizes cybersecurity attacks during the pandemic into three categories. The paper reports these issues concerning the countries in which the attack happened. & Ransomware, DDoS, Phishing \\ \hline
[21] & The study analyses various cybersecurity challenges concerning the UK-based case study and investigates the execution of these cybersecurity issues. The study citations are more than 500. & Phishing, Pharming, Extortion, Malware, Financial fraud, Hacking \\ \hline
[18] & The conceptual study classifies cybersecurity attacks into four groups and gave a subjective overview of strategies to avoid these challenges. & Injection, Information Leakage, DoS, and Flow control issues \\ \hline
[13] & The research study empirically explores the use of digital learning platforms to investigate cybersecurity awareness among students in the Malaysian education system. & Virus, Phishing, DNS Spoofing, Misuse of social network, Password strength, Spam emails, Malware, DoS, Session Hijacking, SQL injection, Man-in-the-middle attack \\ \hline
[11] & This study reports the latest literature on the cybersecurity challenges in the ongoing COVID-19 crisis and highlights a few counterstrategies to minimize these issues. & Ransomware, Data breaches, Scams, Fake emails, Malware, Phishing, Session Invasion, DoS \\ \hline
[14] & The qualitative study encourages the importance of different levels of digital literacy regarding cybersecurity in Portuguese Higher Education (HE) students in COVID-19. & - \\ \hline \hline \end{tabular}
\end{table} 
Table 1: Summary of the studies reporting cybersecurity challenges in the recent major crisis.