{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,25]],"date-time":"2026-05-25T16:04:59Z","timestamp":1779725099780,"version":"3.53.1"},"reference-count":83,"publisher":"MDPI AG","issue":"6","license":[{"start":{"date-parts":[[2026,5,25]],"date-time":"2026-05-25T00:00:00Z","timestamp":1779667200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Systems"],"abstract":"<jats:p>Operational Technology (OT) and Industrial Control Systems (ICSs) along the NATO-EU eastern flank face escalating hybrid threats, yet existing cyber-resilience metrics remain IT-centric, lacking OT-specific constraints and geopolitical exposure dimensions. This paper presents a Design Science Research contribution: the development and simulation-based feasibility demonstration of two interconnected artefacts. The first is the AI-enabled Cyber-Resilience Index (ACRI)\u2014a composite 0\u2013100 metric operationalized through 16 indicators across four domains (detection performance, operational continuity, governance maturity, supply-chain risk), aggregated as a three-term convex combination of capability domains with a linear subtractive supply-chain exposure penalty, weighted via AHP-based illustrative sector-reference profiles. The second is the Unified Compliance Framework (UCF), a structured R \u2192 C \u2192 E \u2192 SLO mapping linking 47 atomic regulatory requirements (NIS2, DORA, CER, AI Act, CRA) to standards (IEC 62443, ISO\/IEC 27001) and auditable evidence artifacts, with a Continuous Assurance Loop operationalizing continuous control monitoring. Feasibility is demonstrated through digital twin simulation under three OT-representative threat scenarios (energy SCADA APT, railway supply-chain compromise, manufacturing ransomware). Results in simulated environments show ACRI improvement from Moderate-Risk baselines (45\u201361) to Adequate-Resilience thresholds (65\u201373); the proposed federated autoencoder\u2013LSTM detector attains a composite Dperf of 0.883 versus 0.510 for a static \u00b13\u03c3 threshold baseline (a 73% relative improvement at the domain level). Sensitivity analysis confirms classification robustness (\u00b17.3% weight perturbation; coefficient of variation below 9.1% across 10,000 Monte Carlo iterations). Critical limitations are explicit: simulation-only evidence (n=12 scenario instances), illustrative (non-empirical) AHP weights, no operational field validation, and limited inferential statistical power. instances), illustrative (non-empirical) AHP weights, no operational field validation, and limited inferential statistical power. The contribution is positioned as a proof-of-concept design artifact establishing methodological foundations for OT-centric resilience assessment and compliance-to-engineering traceability, not as a field-validated operational system.<\/jats:p>","DOI":"10.3390\/systems14060606","type":"journal-article","created":{"date-parts":[[2026,5,25]],"date-time":"2026-05-25T15:05:08Z","timestamp":1779721508000},"page":"606","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["An AI-Enabled Cyber-Resilience Index for Industrial Control Systems: Integrating Regulatory Compliance and Geopolitical Exposure on the NATO-EU Eastern Flank"],"prefix":"10.3390","volume":"14","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-2650-7144","authenticated-orcid":false,"given":"Mircea","family":"Bo\u0219coianu","sequence":"first","affiliation":[{"name":"Faculty of Engineering, Transilvania University of Bra\u0219ov, 500152 Bra\u0219ov, Romania"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0002-8986-478X","authenticated-orcid":false,"given":"Veaceslav","family":"Samburschii","sequence":"additional","affiliation":[{"name":"Interdisciplinary Doctoral School, Transilvania University of Bra\u0219ov, 500036 Bra\u0219ov, Romania"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0005-2535-8839","authenticated-orcid":false,"given":"Alexandru Silviu","family":"Goga","sequence":"additional","affiliation":[{"name":"Faculty of Economic Sciences and Business Administration, Transilvania University of Bra\u0219ov, 500068 Bra\u0219ov, Romania"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0009-8040-215X","authenticated-orcid":false,"given":"Marius Viorel","family":"Posa","sequence":"additional","affiliation":[{"name":"Interdisciplinary Doctoral School, Transilvania University of Bra\u0219ov, 500036 Bra\u0219ov, Romania"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"1968","published-online":{"date-parts":[[2026,5,25]]},"reference":[{"key":"ref_1","unstructured":"Congressional Research Service (2024). Attacks on Ukraine\u2019s Electric Grid: Insights for U.S. Infrastructure Security and Resilience, Congressional Research Service. Technical Report R47751."},{"key":"ref_2","unstructured":"Greenberg, A. (2019). Sandworm: A New Era of Cyberwar and the Hunt for the Kremlin\u2019s Most Dangerous Hackers, Doubleday."},{"key":"ref_3","doi-asserted-by":"crossref","unstructured":"Boschetti, N., Gordon, N.G., and Falco, G. (2022). Space Cybersecurity Lessons Learned from the ViaSat Cyberattack. Proceedings of the Accelerating Space Commerce, Exploration, and New Discovery (ASCEND), Las Vegas, NV, USA, 24\u201326 October 2022, AIAA.","DOI":"10.2514\/6.2022-4380"},{"key":"ref_4","unstructured":"European Union Agency for Cybersecurity (2024). ENISA Threat Landscape 2024, ENISA. Technical Report."},{"key":"ref_5","unstructured":"European Parliament and Council of the European Union (2026, April 20). Directive (EU) 2022\/2555 (NIS2), Available online: https:\/\/eur-lex.europa.eu\/eli\/dir\/2022\/2555\/oj."},{"key":"ref_6","unstructured":"European Parliament and Council of the European Union (2026, April 20). Regulation (EU) 2022\/2554 (DORA), Available online: https:\/\/eur-lex.europa.eu\/eli\/reg\/2022\/2554\/oj\/eng."},{"key":"ref_7","unstructured":"European Parliament and Council of the European Union (2026, April 20). Directive (EU) 2022\/2557 (CER), Available online: https:\/\/eur-lex.europa.eu\/eli\/dir\/2022\/2557\/oj\/eng."},{"key":"ref_8","unstructured":"European Parliament and Council of the European Union (2026, April 20). Regulation (EU) 2024\/2847 (Cyber Resilience Act), Available online: https:\/\/eur-lex.europa.eu\/eli\/reg\/2024\/2847\/oj\/eng."},{"key":"ref_9","unstructured":"European Parliament and Council of the European Union (2026, April 20). Regulation (EU) 2024\/1689 (AI Act), Available online: https:\/\/eur-lex.europa.eu\/eli\/reg\/2024\/1689\/oj\/eng."},{"key":"ref_10","first-page":"10231","article-title":"Digital Twin-Driven Cyber Resilience for Industrial Control Systems","volume":"19","author":"Liu","year":"2023","journal-title":"IEEE Trans. Ind. Inform."},{"key":"ref_11","unstructured":"Alfaqiyah, F., Suhardi, S., and Kurniawan, N. (2025). Exploring Cyber-Resilience in Digital Transformation: A Dynamic Capabilities and Resource-Based Perspective. Sustainability, 17."},{"key":"ref_12","unstructured":"(2023). Time-Sensitive Networking Profile for Industrial Automation (Standard No. IEC\/IEEE 60802). Available online: https:\/\/1.ieee802.org\/wp-content\/uploads\/2023\/05\/P60802D2-CFP.htm."},{"key":"ref_13","unstructured":"(2017). Functional Safety of Electrical\/Electronic\/Programmable Electronic Safety-Related Systems (Standard No. IEC 61508)."},{"key":"ref_14","unstructured":"(2018). Functional Safety\u2014Safety Instrumented Systems for the Process Industry Sector (Standard No. IEC 61511 Series)."},{"key":"ref_15","doi-asserted-by":"crossref","first-page":"47","DOI":"10.1016\/j.ress.2015.08.006","article-title":"A Review of Definitions and Measures of System Resilience","volume":"145","author":"Hosseini","year":"2016","journal-title":"Reliab. Eng. Syst. Saf."},{"key":"ref_16","doi-asserted-by":"crossref","first-page":"471","DOI":"10.1007\/s10669-013-9485-y","article-title":"Resilience Metrics for Cyber Infrastructure","volume":"33","author":"Linkov","year":"2013","journal-title":"Environ. Syst. Decis."},{"key":"ref_17","doi-asserted-by":"crossref","unstructured":"Luo, M., Tao, C., Liu, Y., Chen, S., and Chen, P. (2025). An Endogenous Security-Oriented Framework for Cyber Resilience Assessment in Critical Infrastructures. Appl. Sci., 15.","DOI":"10.3390\/app15158342"},{"key":"ref_18","doi-asserted-by":"crossref","unstructured":"Lubis, M., Safitra, M., Fakhrurroja, H., and Muttaqin, A. (2025). Guarding Our Vital Systems: A Metric for Critical Infrastructure Cyber Resilience. Sensors, 25.","DOI":"10.3390\/s25154545"},{"key":"ref_19","unstructured":"(2024). Security for Industrial Automation and Control Systems (Standard No. IEC 62443)."},{"key":"ref_20","doi-asserted-by":"crossref","unstructured":"(2022). Information Security Management Systems (Standard No. ISO\/IEC 27001:2022).","DOI":"10.2307\/j.ctv30qq13d"},{"key":"ref_21","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1146\/annurev.es.04.110173.000245","article-title":"Resilience and Stability of Ecological Systems","volume":"4","author":"Holling","year":"1973","journal-title":"Annu. Rev. Ecol. Syst."},{"key":"ref_22","doi-asserted-by":"crossref","first-page":"733","DOI":"10.1193\/1.1623497","article-title":"A Framework to Quantitatively Assess and Enhance the Seismic Resilience of Communities","volume":"19","author":"Bruneau","year":"2003","journal-title":"Earthq. Spectra"},{"key":"ref_23","doi-asserted-by":"crossref","first-page":"114","DOI":"10.1016\/j.ress.2011.09.002","article-title":"Generic Metrics and Quantitative Approaches for System Resilience as a Function of Time","volume":"99","author":"Henry","year":"2012","journal-title":"Reliab. Eng. Syst. Saf."},{"key":"ref_24","doi-asserted-by":"crossref","first-page":"90","DOI":"10.1016\/j.ress.2013.07.004","article-title":"A Metric and Frameworks for Resilience Analysis of Engineered and Infrastructure Systems","volume":"121","author":"Francis","year":"2014","journal-title":"Reliab. Eng. Syst. Saf."},{"key":"ref_25","doi-asserted-by":"crossref","first-page":"5","DOI":"10.1016\/j.ress.2015.03.018","article-title":"Four Concepts for Resilience and the Implications for the Future of Resilience Engineering","volume":"141","author":"Woods","year":"2015","journal-title":"Reliab. Eng. Syst. Saf."},{"key":"ref_26","doi-asserted-by":"crossref","first-page":"142","DOI":"10.1016\/j.ress.2015.03.007","article-title":"A Systematic Literature Review of Resilience Engineering: Research Areas and a Research Agenda Proposal","volume":"141","author":"Righi","year":"2015","journal-title":"Reliab. Eng. Syst. Saf."},{"key":"ref_27","unstructured":"Bodeau, D., and Graubart, R. (2011). Cyber Resiliency Engineering Framework, MITRE Corporation. Technical Report MTR110237."},{"key":"ref_28","unstructured":"National Institute of Standards and Technology (2021). Developing Cyber-Resilient Systems: A Systems Security Engineering Approach, NIST. Technical Report SP 800-160."},{"key":"ref_29","doi-asserted-by":"crossref","unstructured":"Kott, A., and Linkov, I. (2019). Cyber Resilience of Systems and Networks, Springer.","DOI":"10.1007\/978-3-319-77492-3"},{"key":"ref_30","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/2542049","article-title":"A Survey of Intrusion Detection Techniques for Cyber-Physical Systems","volume":"46","author":"Mitchell","year":"2014","journal-title":"ACM Comput. Surv."},{"key":"ref_31","doi-asserted-by":"crossref","first-page":"1802","DOI":"10.1109\/JIOT.2017.2703172","article-title":"Cyber-Physical Systems Security\u2014A Survey","volume":"4","author":"Humayed","year":"2017","journal-title":"IEEE Internet Things J."},{"key":"ref_32","doi-asserted-by":"crossref","unstructured":"Kravchik, M., and Shabtai, A. (2018, January 18\u201319). Detecting Cyber Attacks in Industrial Control Systems Using Convolutional Neural Networks. Proceedings of the ACM Workshop on Cyber-Physical Systems Security and Privacy (CPS-SPC), Toronto, Canada.","DOI":"10.1145\/3264888.3264896"},{"key":"ref_33","doi-asserted-by":"crossref","unstructured":"Goh, J., Adepu, S., Tan, M., and Lee, Z.S. (2017, January 12\u201314). Anomaly Detection in Cyber Physical Systems Using Recurrent Neural Networks. Proceedings of the IEEE International Symposium on High Assurance Systems Engineering (HASE 2017), Singapore.","DOI":"10.1109\/HASE.2017.36"},{"key":"ref_34","doi-asserted-by":"crossref","first-page":"13","DOI":"10.1186\/s42400-020-00052-8","article-title":"Cyber Risk at the Edge: Current and Future Trends on Cyber Risk Analytics and Artificial Intelligence in the Industrial Internet of Things and Industry 4.0 Supply Chains","volume":"3","author":"Radanliev","year":"2020","journal-title":"Cybersecurity"},{"key":"ref_35","unstructured":"McMahan, B., Moore, E., Ramage, D., Hampson, S., and y Arcas, B.A. (2017, January 20\u201322). Communication-Efficient Learning of Deep Networks from Decentralized Data. Proceedings of the International Conference on Artificial Intelligence and Statistics (AISTATS), Fort Lauderdale, FL, USA."},{"key":"ref_36","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1561\/2200000083","article-title":"Advances and Open Problems in Federated Learning","volume":"14","author":"Kairouz","year":"2021","journal-title":"Found. Trends Mach. Learn."},{"key":"ref_37","first-page":"1","article-title":"Federated Machine Learning: Concept and Applications","volume":"10","author":"Yang","year":"2019","journal-title":"ACM Trans. Intell. Syst. Technol."},{"key":"ref_38","unstructured":"Bonawitz, K., Ivanov, V., Kreuter, B., Marcedone, A., McMahan, H.B., Patel, S., Ramage, D., Segal, A., and Seth, K. (November, January 30). Practical Secure Aggregation for Privacy-Preserving Machine Learning. Proceedings of the Conference on Computer and Communications Security (ACM CCS), Dallas, TX, USA."},{"key":"ref_39","doi-asserted-by":"crossref","first-page":"612","DOI":"10.1145\/359168.359176","article-title":"How to Share a Secret","volume":"22","author":"Shamir","year":"1979","journal-title":"Commun. ACM"},{"key":"ref_40","doi-asserted-by":"crossref","first-page":"619","DOI":"10.1016\/j.future.2020.10.007","article-title":"A Survey on Security and Privacy of Federated Learning","volume":"115","author":"Mothukuri","year":"2021","journal-title":"Future Gener. Comput. Syst."},{"key":"ref_41","first-page":"1","article-title":"Differential Privacy","volume":"Volume 4052","author":"Dwork","year":"2006","journal-title":"Automata, Languages and Programming\u2014ICALP 2006"},{"key":"ref_42","doi-asserted-by":"crossref","first-page":"211","DOI":"10.1561\/0400000042","article-title":"The Algorithmic Foundations of Differential Privacy","volume":"9","author":"Dwork","year":"2014","journal-title":"Found. Trends Theor. Comput. Sci."},{"key":"ref_43","doi-asserted-by":"crossref","unstructured":"Abadi, M., Chu, A., Goodfellow, I., McMahan, H.B., Mironov, I., Talwar, K., and Zhang, L. (2016, January 24\u201328). Deep Learning with Differential Privacy. Proceedings of the Conference on Computer and Communications Security (ACM CCS), Vienna, Austria.","DOI":"10.1145\/2976749.2978318"},{"key":"ref_44","doi-asserted-by":"crossref","first-page":"46","DOI":"10.1145\/321738.321743","article-title":"Scheduling Algorithms for Multiprogramming in a Hard-Real-Time Environment","volume":"20","author":"Liu","year":"1973","journal-title":"J. ACM"},{"key":"ref_45","doi-asserted-by":"crossref","first-page":"389","DOI":"10.1038\/s42256-019-0088-2","article-title":"The Global Landscape of AI Ethics Guidelines","volume":"1","author":"Jobin","year":"2019","journal-title":"Nat. Mach. Intell."},{"key":"ref_46","doi-asserted-by":"crossref","first-page":"141","DOI":"10.1016\/0166-3615(94)90017-5","article-title":"The Purdue Enterprise Reference Architecture","volume":"24","author":"Williams","year":"1994","journal-title":"Comput. Ind."},{"key":"ref_47","doi-asserted-by":"crossref","unstructured":"Stouffer, K., Pease, M., Tang, C., Zimmerman, T., Pillitteri, V., and Lightman, S. (2023). Guide to Operational Technology (OT) Security, NIST. Technical Report Special Publication 800-82 Rev. 3.","DOI":"10.6028\/NIST.SP.800-82r3"},{"key":"ref_48","unstructured":"(2023). Power Systems Data and Communications Security (Standard No. IEC 62351)."},{"key":"ref_49","first-page":"106","article-title":"A Frame of Reference for Research of Integrated Governance, Risk and Compliance (GRC)","volume":"Volume 6109","author":"Racz","year":"2010","journal-title":"Proceedings of the IFIP Communications and Multimedia Security (CMS), Linz, Austria, 31 May\u20132 June 2010"},{"key":"ref_50","doi-asserted-by":"crossref","unstructured":"Kello, L. (2017). The Virtual Weapon and International Order, Yale University Press.","DOI":"10.2307\/j.ctt1trkjd1"},{"key":"ref_51","doi-asserted-by":"crossref","first-page":"105","DOI":"10.1111\/misr.12023","article-title":"From Cyber-Bombs to Political Fallout: Threat Representations with an Impact in the Cyber-Security Discourse","volume":"15","year":"2013","journal-title":"Int. Stud. Rev."},{"key":"ref_52","doi-asserted-by":"crossref","first-page":"51","DOI":"10.1162\/isec_a_00418","article-title":"The Subversive Trilemma: Why Cyber Operations Fall Short of Expectations","volume":"46","author":"Maschmeyer","year":"2021","journal-title":"Int. Secur."},{"key":"ref_53","doi-asserted-by":"crossref","first-page":"1194","DOI":"10.1257\/aer.20191823","article-title":"Measuring Geopolitical Risk","volume":"112","author":"Caldara","year":"2022","journal-title":"Am. Econ. Rev."},{"key":"ref_54","doi-asserted-by":"crossref","first-page":"1593","DOI":"10.1093\/qje\/qjw024","article-title":"Measuring Economic Policy Uncertainty","volume":"131","author":"Baker","year":"2016","journal-title":"Q. J. Econ."},{"key":"ref_55","doi-asserted-by":"crossref","first-page":"1060","DOI":"10.1016\/j.rser.2015.12.193","article-title":"On the Definition of Cyber-Physical Resilience in Power Systems","volume":"58","author":"Arghandeh","year":"2016","journal-title":"Renew. Sustain. Energy Rev."},{"key":"ref_56","doi-asserted-by":"crossref","first-page":"46","DOI":"10.1016\/j.ijcip.2015.12.002","article-title":"Time-Based Critical Infrastructure Dependency Analysis for Large-Scale and Cross-Sectoral Failures","volume":"12","author":"Stergiopoulos","year":"2016","journal-title":"Int. J. Crit. Infrastruct. Prot."},{"key":"ref_57","unstructured":"OASIS (2017). Structured Threat Information Expression (STIX), Version 2.1, Organization for the Advancement of Structured Information Standards."},{"key":"ref_58","unstructured":"OASIS (2021). Trusted Automated Exchange of Indicator Information (TAXII), Version 2.1, Organization for the Advancement of Structured Information Standards."},{"key":"ref_59","unstructured":"European Commission (2020). EU-CyCLONe (European Cyber Crises Liaison Organisation Network), European Commission."},{"key":"ref_60","doi-asserted-by":"crossref","first-page":"307","DOI":"10.1111\/j.1467-985X.2005.00350.x","article-title":"Uncertainty and Sensitivity Analysis Techniques as Tools for the Quality Assessment of Composite Indicators","volume":"168","author":"Saisana","year":"2005","journal-title":"J. R. Stat. Soc. Ser. A"},{"key":"ref_61","doi-asserted-by":"crossref","first-page":"61","DOI":"10.1007\/s11205-017-1832-9","article-title":"On the Methodological Framework of Composite Indices: A Review of the Issues of Weighting, Aggregation, and Robustness","volume":"141","author":"Greco","year":"2019","journal-title":"Soc. Indic. Res."},{"key":"ref_62","unstructured":"OECD\/European Commission\/JRC (2008). Handbook on Constructing Composite Indicators: Methodology and User Guide, OECD Publishing."},{"key":"ref_63","doi-asserted-by":"crossref","first-page":"117","DOI":"10.1007\/s10668-003-4713-0","article-title":"Measuring Sustainability: A Multi-Criterion Framework","volume":"7","author":"Munda","year":"2005","journal-title":"Environ. Dev. Sustain."},{"key":"ref_64","doi-asserted-by":"crossref","first-page":"12","DOI":"10.1016\/j.ecolind.2017.03.056","article-title":"Weights and Importance in Composite Indicators: Closing the Gap","volume":"80","author":"Becker","year":"2017","journal-title":"Ecol. Indic."},{"key":"ref_65","doi-asserted-by":"crossref","unstructured":"Saaty, T.L. (1980). The Analytic Hierarchy Process: Planning, Priority Setting, Resource Allocation, McGraw-Hill.","DOI":"10.21236\/ADA214804"},{"key":"ref_66","first-page":"83","article-title":"Decision Making with the Analytic Hierarchy Process","volume":"1","author":"Saaty","year":"2008","journal-title":"Int. J. Serv. Sci."},{"key":"ref_67","first-page":"14336","article-title":"Review of the Main Developments in the Analytic Hierarchy Process","volume":"38","author":"Ishizaka","year":"2011","journal-title":"Expert Syst. Appl."},{"key":"ref_68","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1016\/j.ejor.2004.04.028","article-title":"Analytic Hierarchy Process: An Overview of Applications","volume":"169","author":"Vaidya","year":"2006","journal-title":"Eur. J. Oper. Res."},{"key":"ref_69","doi-asserted-by":"crossref","first-page":"249","DOI":"10.1287\/mnsc.36.3.249","article-title":"Remarks on the Analytic Hierarchy Process","volume":"36","author":"Dyer","year":"1990","journal-title":"Manag. Sci."},{"key":"ref_70","doi-asserted-by":"crossref","first-page":"49","DOI":"10.1016\/j.omega.2014.11.009","article-title":"Best-Worst Multi-Criteria Decision-Making Method","volume":"53","author":"Rezaei","year":"2015","journal-title":"Omega"},{"key":"ref_71","unstructured":"OPC Foundation (2023). OPC Unified Architecture\u2014Publisher\/Subscriber (PubSub) Specification, OPC Foundation."},{"key":"ref_72","doi-asserted-by":"crossref","first-page":"75","DOI":"10.2307\/25148625","article-title":"Design Science in Information Systems Research","volume":"28","author":"Hevner","year":"2004","journal-title":"MIS Q."},{"key":"ref_73","doi-asserted-by":"crossref","first-page":"45","DOI":"10.2753\/MIS0742-1222240302","article-title":"A Design Science Research Methodology for Information Systems Research","volume":"24","author":"Peffers","year":"2007","journal-title":"J. Manag. Inf. Syst."},{"key":"ref_74","unstructured":"National Institute of Standards and Technology (2024). NIST Cybersecurity Framework 2.0, National Institute of Standards and Technology."},{"key":"ref_75","unstructured":"Zhao, Y., Li, M., Lai, L., Suda, N., Civin, D., and Chandra, V. (2018). Federated Learning with Non-IID Data. arXiv."},{"key":"ref_76","unstructured":"Jeffries, B., Saravia, S., Carter, C., and Ankuda, Z. (2022). Cyber Risk to Mission Case Study: Norsk Hydro, The MITRE Corporation. Available online: https:\/\/apps.dtic.mil\/sti\/trecms\/pdf\/AD1183007.pdf."},{"key":"ref_77","unstructured":"Strom, B.E., Applebaum, A., Miller, D.P., Nickels, K.C., Pennington, A.G., and Thomas, C.B. (2020). MITRE ATT&CK: Design and Philosophy, MITRE. Technical Report MP180360R1."},{"key":"ref_78","unstructured":"MITRE Corporation (2026, April 19). MITRE ATT&CK for ICS Matrix. Available online: https:\/\/attack.mitre.org\/matrices\/ics\/."},{"key":"ref_79","first-page":"99","article-title":"Firm Resources and Sustained Competitive Advantage","volume":"17","author":"Barney","year":"1991","journal-title":"J. Manag."},{"key":"ref_80","doi-asserted-by":"crossref","first-page":"1319","DOI":"10.1002\/smj.640","article-title":"Explicating Dynamic Capabilities: The Nature and Microfoundations of (Sustainable) Enterprise Performance","volume":"28","author":"Teece","year":"2007","journal-title":"Strateg. Manag. J."},{"key":"ref_81","doi-asserted-by":"crossref","first-page":"1105","DOI":"10.1002\/1097-0266(200010\/11)21:10\/11<1105::AID-SMJ133>3.0.CO;2-E","article-title":"Dynamic Capabilities: What Are They?","volume":"21","author":"Eisenhardt","year":"2000","journal-title":"Strateg. Manag. J."},{"key":"ref_82","unstructured":"Shadish, W.R., Cook, T.D., and Campbell, D.T. (2002). Experimental and Quasi-Experimental Designs for Generalized Causal Inference, Houghton Mifflin."},{"key":"ref_83","doi-asserted-by":"crossref","unstructured":"Wohlin, C., Runeson, P., H\u00f6st, M., Ohlsson, M.C., Regnell, B., and Wessl\u00e9n, A. (2012). Experimentation in Software Engineering, Springer.","DOI":"10.1007\/978-3-642-29044-2"}],"container-title":["Systems"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/2079-8954\/14\/6\/606\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,5,25]],"date-time":"2026-05-25T15:27:09Z","timestamp":1779722829000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/2079-8954\/14\/6\/606"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,5,25]]},"references-count":83,"journal-issue":{"issue":"6","published-online":{"date-parts":[[2026,6]]}},"alternative-id":["systems14060606"],"URL":"https:\/\/doi.org\/10.3390\/systems14060606","relation":{},"ISSN":["2079-8954"],"issn-type":[{"value":"2079-8954","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,5,25]]}}}