## 6 Theoretical and Practical Contribution  
This study contributes to the body of literature on IS research, particularly cybersecurity challenges, in the following ways:  
1. This study has made theoretical progress toward addressing the cybersecurity challenges that emerged amidst the major crisis. By focusing exclusively on the HERS, this study has addressed real cybersecurity incidents and their underlying situations amidst the recent major crisis in Australia.
2. Although several researchers have pointed to rethinking and redesigning the current organizational practices to mitigate the immense increase in cybersecurity challenges amidst the recent major crisis [134; 135; 84; 136], few studies have addressed the cybersecurity challenges during the recent major crisis [18; 9; 45]. However, most of the studies are conceptual literature review papers and do not focus on a particular sector [PERSON] et al. (2021) [18] and [PERSON] et al. (2021) [45]. There is limited literature on empirically identifying real cybersecurity challenges that emerged in the HERS, particularly amidst the major crisis. The current study filled this research gap and has exclusively identified the cybersecurity challenges faced by the HERS amidst a major crisis.  
The prior literature has not considered extensively investigating the HERS, though it has experienced one of the highest percentages of cyberattacks [7]. Previous studies have pointed out several cybersecurity challenges; however, most of the studies are conceptual in nature and lack investigation and classification of cybersecurity challenges considering one particular sector [19; 43; 44]. Therefore, this study took the opportunity to identify cybersecurity challenges exclusively and explore strategic resilience changes to minimize these challenges in the HERS in Australia amidst a recent major crisis.
* Building on the STS theory, this study contributes to the understanding and classifying of identified cybersecurity challenges. This study extends and proposes an STS cybersecurity model that posits an interrelationship between five organizational subsystems instead of the previously used three subsystems in the literature. More specifically, the STS cybersecurity model explains the emerging cybersecurity challenges by various factors, indicating the social, technical, political, economic, and environmental subsystems. The proposed model contributes to the STS literature by addressing key cybersecurity challenges HERS has faced amidst the major crisis due to shortcomings in the factors associated with the five subsystems.  
This research study makes various practical contributions, first, to the HERS, in which the study was conducted and, second, to other sectors and practitioners involved in identifying and classifying cybersecurity challenges that emerged amidst the major crisis. The rich classification of cybersecurity challenges amidst the major crisis provides novel insights and knowledge that are relevant for various stakeholders. Three key stakeholder groups can benefit from this study: cybersecurity departments, strategic managers, and cybersecurity consultants.  
* For the cybersecurity department, this study has provided a method for classifying cybersecurity challenges concerning factors involving five different subsystems in an organization.
* For cybersecurity consultants and strategic managers, this study has provided better knowledge of how cybersecurity challenges can be classified and explained following various organizational subsystems. Both the cybersecurity department and strategic managers should not only understand the cybersecurity challenges but must also have knowledge of the particular subsystem elements where they are falling behind and due to which they are becoming the victim of that particular cybersecurity challenge. The STS cybersecurity framework acts as a tool for guiding the classification of cybersecurity challenges during any major organizational changes.