Augmenting analyst thinking through human-centered design to enable asset management in cybersecurity
摘要
Cybersecurity management system (CSMS) comprises of multiple management systems such as asset management, vulnerability management, incident management, change management, and configuration management, among others. Asset management is one of the crucial management systems interlinked to these other management systems that improve the organization’s cybersecurity posture. We use a human-centered design process for interface design of asset management in CSMS for better usability, decision-making, and effective operations. Towards this end, the article uses integrated Ecological Interface Design, as the interface design process. This iEID process from the discipline of human factors is derived from a long generation of interface design approaches in dealing with complexity. In this design process, the article derives insights from the background literature and a field study at a leading cybersecurity consulting enterprise. It charts the analysts’ mental models of their practice at several levels of abstraction using human-centered functional modeling approaches. Based on this mental model, an interface was developed that supports the analyst’s thought process for effective asset management in CSMS. The article contributes to the literature on information systems, functional modeling, and human-centered design for managing complexity in asset management in CSMS.