Cybersecurity Advocates: Discovering the Characteristics and Skills of an Emergent Role.

IF 1.6 Q3 COMPUTER SCIENCE, INFORMATION SYSTEMS

Information and Computer Security Pub Date : 2021-01-01 DOI:10.1108/ics-08-2020-0131

Julie M Haney, Wayne G Lutters

引用次数: 8

Abstract

Purpose: Cybersecurity advocates safeguard their organizations by promoting security best practices. However, little is known about what constitutes successful advocacy.

Methodology: We conducted 28 in-depth interviews of cybersecurity advocates.

Findings: Effective advocates not only possess technical acumen, but also interpersonal skills, communication acumen, context awareness, and a customer service orientation.

Originality: We are the first to define and enumerate competencies for the role of cybersecurity advocate.

Implications: Non-technical skills are deemphasized in cybersecurity training, limiting career progression into the cybersecurity advocate role for existing security professionals and those from other disciplines. We suggest improvements for professional development that encourage greater security workforce diversity.

查看原文本刊更多论文

网络安全倡导者:发现一个新兴角色的特征和技能。

目的:网络安全倡导者通过推广安全最佳实践来保护他们的组织。然而，人们对什么是成功的倡导知之甚少。方法:我们对网络安全倡导者进行了28次深度访谈。研究发现:有效的倡导者不仅具有技术敏锐度，还具有人际交往能力、沟通敏锐度、情境意识和客户服务导向。原创性:我们是第一个定义和列举网络安全倡导者角色的能力。影响:非技术技能在网络安全培训中不被重视，限制了现有安全专业人员和其他学科人员进入网络安全倡导者角色的职业发展。我们建议改进专业发展，鼓励更多的安保人员多样化。

本文章由计算机程序翻译，如有差异，请以英文原文为准。

求助全文

约1分钟内获得全文求助全文

来源期刊

Information and Computer Security COMPUTER SCIENCE, INFORMATION SYSTEMS-

CiteScore

4.60

自引率

7.10%

发文量

期刊介绍： Information and Computer Security (ICS) contributes to the advance of knowledge directly related to the theory and practice of the management and security of information and information systems. It publishes research and case study papers relating to new technologies, methodological developments, empirical studies and practical applications. The journal welcomes papers addressing research and case studies in relation to many aspects of information and computer security. Topics of interest include, but are not limited to, the following: Information security management, standards and policies Security governance and compliance Risk assessment and modelling Security awareness, education and culture User perceptions and understanding of security Misuse and abuse of computer systems User-facing security technologies Internet security and privacy The journal is particularly interested in receiving submissions that consider the business and organisational aspects of security, and welcomes papers from both human and technical perspective on the topic. However, please note we do not look to solicit papers relating to the underlying mechanisms and functions of security methods such as cryptography (although relevant applications of the technology may be considered).