INCIDENT RESPONSE PLANNING AND THREAT INTELLIGENCE FOR TRANSPORTATION CYBERSECURITY OPERATIONS

Аннотация

This research investigates the integration of incident response planning and threat intelligence in transportation cybersecurity operations, emphasising the unique threat landscape faced by critical transit infrastructures. The study employs a mixed-methods approach combining structured interviews with cybersecurity practitioners in the transportation sector and a thematic analysis of incident response plans across multiple modal systems. The key findings reveal that organisations with dynamic threat-intelligence capabilities achieve more resilient incident response outcomes, characterised by reduced detection-to-containment times and improved post-incident learning. The conclusions assert that embedding real-time threat intelligence into incident response planning enhances operational readiness and suggests a refined framework tailored to transportation systems. These insights contribute to the advancement of cybersecurity practices for vital infrastructure and articulate directions for future empirical work.