It is commonly acknowledged that the rapid convergence of IT, OT and AI infrastructures has fundamentally reshaped the digital landscape, especially across critical sectors such as energy, transportation, healthcare, maritime and manufacturing. While traditional risk management frameworks tend to prioritize technical controls, the human factor is often treated merely as risk vector rather than as critical defense asset. This thesis proposes a human-centric risk assessment framework that quantifies human vulnerabilities by bridging psychosocial variables with traditional technical vulnerability metrics. To validate the proposed model, a functional Proof of Concept application is developed, aligned with major international standards and regulations. The framework’s effectiveness is being evaluated and compared to other frameworks through a maritime case study. Finally, a survey is conducted among a group of seafarers to measure the threat level of human factor. The findings conclude that securing modern hybrid infrastructures requires a shift from static asset-oriented models to dynamic and continuous human risk management approaches, aligned with emerging socio-technical methodologies.