Not All Heroes Wear Capes: Cyber Resilience of the Social Administration at a Swedish Municipality

This study examines the role of crisis management as an enabling practice for organizational cyber resilience within the public sector. Taking a stakeholder perspective, this qualitative case study analyzes how a Swedish municipal social administration, which was the victim of a ransomware attack that escalated into a crisis, managed to maintain essential services despite widespread disruptions to its digital systems. The case study demonstrates the limitations of a purely technical approach to managing cyberattacks. It offers valuable insights into the characteristics of a cyber crisis and its impact on critical municipal services. The results highlight the need to integrate crisis management and cybersecurity efforts for enhanced organizational cyber resilience. They also highlight the role of specific stakeholders “at the edge” of the organization during a (cyber) crisis: the nontechnical employees who were the first to handle the operational consequences of the digital disruption and ensured that the public services continued to function. The article presents findings on how public service cyber resilience can be strengthened and sustained through effective crisis management practices, including adaptability, sound decision‐making, and clear communication. This study thus contributes to an enhanced understanding of cyber crisis management in public organizations in general and practices relevant to strengthening cyber resilience in particular.

• Publication year

  2025

• Venue

  Risk, Hazards & Crisis in Public Policy

• Publication date

  2025-08-18

• Fields of study

  Not labeled

• Identifiers
  DOI 10.1002/rhc3.70024
• External record

  Open on Semantic Scholar

• Source metadata

  Semantic Scholar

• No claims are published for this paper.

• No concepts are published for this paper.

• From Security Frameworks to Sustainable Municipal Cybersecurity Capabilities

  2025cited by this paper
• Logic of crisis management practice in handling the COVID-19 pandemic: Experiences from two Swedish public-sector organizations.

  2025cited by this paper
• Managing a Ransomware Attack: The Resilience of a Swedish Municipality - A Case Study

  2025cited by this paper
• Building organizational adaptive capacity in the face of crisis: Lessons from a public sector case study

  2024cited by this paper
• Towards a cybersecurity culture-behaviour framework: A rapid evidence review

  2024cited by this paper
• What and how to train for strategic crisis management: A systematic literature review

  2024cited by this paper
• A review of the foundations of systems, infrastructure and governance

  2023cited by this paper
• The tensions of cyber-resilience: From sensemaking to practice

  2023cited by this paper
• Exploring the potential of local stakeholders’ involvement in crisis management. The living lab approach in a case study from amsterdam

  2022cited by this paper
• Framing volunteers identifying and integrating volunteers in crises response operations

  2022cited by this paper
• Left in the Dark: Obstacles to Studying and Performing Critical Infrastructure Protection

  2021cited by this paper
• Multi-Level Planning for Enhancing Critical Infrastructure Resilience against Power Shortages—An Analysis of the Swedish System of Styrel

  2021cited by this paper
• Beyond Ones and Zeros: Conceptualizing Cyber Crises

  2020cited by this paper
• Crisis Management Process - A Literature Review and a Conceptual Integration

  2020cited by this paper
• Conceptualizing cyber crises

  2020cited by this paper
• The cyber-resilience of financial institutions: significance and applicability

  2019cited by this paper
• How integration of cyber security management and incident response enables organizational learning

  2019cited by this paper
• Measuring and improving adaptive capacity in resilient systems by means of an integrated DEA-Machine learning approach.

  2019cited by this paper
• Review of cybersecurity frameworks: context and shared concepts

  2018cited by this paper
• National cyber crisis management: Different European approaches

  2018cited by this paper
• Resilience metrics for cyber systems

  2013cited by this paper
• Adaptive capacity and its assessment

  2011cited by this paper
• Economic resilience to natural and man-made disasters: Multidisciplinary origins and contextual dimensions

  2007cited by this paper
• Preparing for Critical Infrastructure Breakdowns: The Limits of Crisis Management and the Need for Resilience

  2007cited by this paper
• Doing interpretive research

  2006cited by this paper
• Lessons from Crisis Research

  2004cited by this paper
• A Picture of the Frame: Frame Analysis as Technique and as Politics

  2002cited by this paper
• Reframing Crisis Management

  1998cited by this paper
• Interpretive case studies in IS research: nature and method

  1995cited by this paper

• No citing papers are available for this paper.