Cybersecurity and Resilience Capabilities in Transport Systems: Assessing Frameworks, Gaps, and an Integrated Maturity Model

Purpose: Transport systems are increasingly digital, exposing them to complex cybersecurity risks that threaten operational continuity and public safety, prompting this study to evaluate and enhance cybersecurity and resilience capabilities across transport networks through analysis of major frameworks from National Institute of Standards and Technology, International Organization for Standardization, and European Union Agency for Cybersecurity. Methodology: Using a mixed-method approach that combined documentary analysis, expert interviews, and a pilot resilience maturity assessment across aviation, rail, maritime, and road sectors, Findings: The study identified uneven preparedness levels, with aviation demonstrating stronger monitoring and recovery mechanisms while road transport showed weaker incident response coordination. Significant gaps were found in data-sharing practices, workforce awareness, and cross-sector policy alignment. In response, a Cybersecurity Resilience Maturity Model (CRMM) structured around Prevention, Detection, Response, Recovery, and Adaptation was developed to support benchmarking, guide investment decisions, and monitor resilience improvement. Unique Contribution to Theory, Practice and Policy: The study concludes that integrated cybersecurity–resilience strategies are essential for ensuring safe, reliable, and sustainable transport operations in an increasingly connected environment.