Article: Ransomware as a public safety crisis: a human-centric socio-legal framework for critical infrastructure resilience Journal: International Journal of Computing Science and Mathematics (IJCSM) 2026 Vol.23 No.2 pp.176 - 186 Abstract: Ransomware has evolved from a financial crime into a systemic threat to critical infrastructure (CI), disrupting healthcare, transport, and government services with kinetic consequences. While current cybersecurity discourses prioritise data protection (confidentiality) and organisational compliance, they often overlook the cascading physical and social harms inherent in tightly coupled digital systems. This paper critiques existing technocentric and regulatory frameworks - such as GDPR and NIS2 - arguing they are ill-equipped to address the 'human cost' of service interruptions. Adopting a socio-legal perspective and utilising Normal Accident Theory, the study analyses the limitations of current governance models in protecting public safety against 'infrastructural violence'. It contributes to the literature by proposing a Human-Centred Critical Infrastructure Cybersecurity Framework. This framework redefines ransomware as a public safety issue, advocating for governance structures that prioritise human reliance, ethical responsibility, and social resilience over mere technical recovery. Inderscience Publishers - linking academia, business and industry through research

Title: Ransomware as a public safety crisis: a human-centric socio-legal framework for critical infrastructure resilience

Authors: Fahad Eyada Alanazi

Addresses: Department of Computer Science and Engineering, La Trobe University, Melbourne, VIC 3086 Australia; Department of Computer and Information Technology, Auckland University of Technology, Auckland, CBD 1010, New Zealand; Department of Business and Management and Law, RMIT University, Melbourne, VIC 3000, Australia

Abstract: Ransomware has evolved from a financial crime into a systemic threat to critical infrastructure (CI), disrupting healthcare, transport, and government services with kinetic consequences. While current cybersecurity discourses prioritise data protection (confidentiality) and organisational compliance, they often overlook the cascading physical and social harms inherent in tightly coupled digital systems. This paper critiques existing technocentric and regulatory frameworks - such as GDPR and NIS2 - arguing they are ill-equipped to address the 'human cost' of service interruptions. Adopting a socio-legal perspective and utilising Normal Accident Theory, the study analyses the limitations of current governance models in protecting public safety against 'infrastructural violence'. It contributes to the literature by proposing a Human-Centred Critical Infrastructure Cybersecurity Framework. This framework redefines ransomware as a public safety issue, advocating for governance structures that prioritise human reliance, ethical responsibility, and social resilience over mere technical recovery.

Keywords: ransomware; CIP; critical infrastructure protection; human-centric cybersecurity; normal accident theory; public safety; socio-legal governance.

DOI: 10.1504/IJCSM.2026.154302

International Journal of Computing Science and Mathematics, 2026 Vol.23 No.2, pp.176 - 186

Received: 07 Feb 2026
Accepted: 16 Feb 2026
Published online: 19 Jun 2026 *

Full-text access for editors Full-text access for subscribers Purchase this article Comment on this article

Title: Ransomware as a public safety crisis: a human-centric socio-legal framework for critical infrastructure resilience

Keep up-to-date