Public-Sector Cybersecurity Governance Following Ransomware Incidents

Abstract

Background: Questions surrounding cybersecurity are administrative as well as legal because institutional practice can influence ransomware, consistency, and accountability.

Objective: Our objective was to determine how institutional arrangements concerning cybersecurity influenced implementation consistency and outcomes related to ransomware.

Methods: The study surveyed 123 relevant officials, professionals, service users, or regulated actors. Questionnaire items covered implementation quality, capacity, procedural clarity, transparency, and perceived effectiveness; associations with implementation outcomes were assessed descriptively and with multivariable regression.

Results: The final analytic sample for cybersecurity included 123 respondents. Consistent implementation was reported by 44%, while 15% identified significant capacity or procedural barriers. Organizations with clearer responsibilities, more capable staff, and accessible formal guidance recorded better adjusted implementation outcomes.

Conclusion: Implementation conditions appear decisive for the effectiveness of policy relating to cybersecurity. Accordingly, public-sector cyber governance should integrate clear responsibility, incident learning, and coordinated oversight rather than rely on policy statements alone.

Study design: agency survey and incident comparison.

Publication history: Originally published in print on 15 June 2022, Volume 2, Article 12. Online abstract record added on 16 September 2026. Full-text PDF will be added when the digital galley is ready.