Consequence-driven Cyber-informed Engineering (CCE) offers a powerful methodology for protecting critical infrastructure, but its significant resource requirements often prevent adoption by organizations with limited financial capacity, personnel availability, or technical expertise. This research addresses this implementation gap, particularly relevant for sectors like wastewater treatment. The primary aim was to adapt the CCE method to make it more resource-efficient while maintaining its core protective principles.

Employing a Design Science Research (DSR) approach, this study involved analyzing the original CCE method using literature review, theoretical frameworks (including Resource-Based View and Systems Thinking), and expert consultations. Based on this analysis, specific adaptations were developed for each CCE phase, focusing on streamlining activities, utilizing templates and existing resources, prioritizing critical elements, and incorporating flexibility in the form of an iterative approach to the method itself. These adaptations were evaluated theoretically through comparative analysis against the original method and validated via structured expert feedback sessions using feasibility, effectiveness, and resource efficiency criteria.

The research resulted in a systematically developed adapted CCE framework, presented as a guiding artifact (Appendix E). The evaluation indicates that the adapted method significantly reduces estimated resource needs (particularly regarding time and required expertise) compared to the original CCE. Expert validation generally supported the feasibility and potential effectiveness of the adaptations, confirming that the method's core principles—a focus on consequences and protective engineering—were preserved. This adapted CCE process provides a more attainable and pragmatic pathway for resource-constrained organizations to improve their cyber resilience against HCEs.