Transferability of High-Risk Safety Concepts to Information Security - An Analysis of Established Safety Concepts from Aviation and Healthcare

Increasing digitalization has resulted in IT systems becoming an integral part of social and economic infrastructures. Despite advanced technologies, humans play a central role in information security, as a substantial share of security incidents can be attributed to human behavior. This paper examines the transferability of proven safety concepts from high-risk industries such as aviation and healthcare to information security. The research question is: "Which safety concepts from high-risk industries show the highest conceptual transfer potential to information security?" A multi-methods approach was chosen to answer the research question. A systematic literature review identifies and describes nine safety concepts. In addition, a utility analysis is carried out to comparatively evaluate the suitability of the concepts for use in information security. The work contributes to the understanding of human factors in information security and opens up new perspectives for the cross-industry transfer of safety concepts.