Cybersecurity incident management is a critical aspect of organisational resilience, integrating both technical and human-centric solutions for security assurance. While technological advancements are indispensable for the enhancement of cybersecurity operations and capabilities, humans, who are the core of these systems, play a decisive role in the effective use of technology and the management of the incidents in general. This paper explores the influence of human factors in cybersecurity incident operations, employing a human-technology interaction view to analyse cognitive and behavioural aspects of the decision-making processes, communication dynamics, and stress management. Through a literature review, we identify key challenges in human-factors research within the context and conceptualise them according to the well-known Technology-Human-Task-Context (THTC) framework. The findings highlight the necessity of integrating cognitive and affective considerations into cybersecurity frameworks to optimise response strategies and reduce the impact of security incidents. These insights help us contextualise and extend the initial framework to provide better understanding of human-technology interaction in cybersecurity incident management. By addressing these human-centric challenges, organisations can enhance their cybersecurity posture and foster a more resilient incident response ecosystem.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

The Role of Human Factors in Cybersecurity Incident Management

  • Jan Kincl,
  • Marc T. P. Adam,
  • Tanja Pavleska

摘要

Cybersecurity incident management is a critical aspect of organisational resilience, integrating both technical and human-centric solutions for security assurance. While technological advancements are indispensable for the enhancement of cybersecurity operations and capabilities, humans, who are the core of these systems, play a decisive role in the effective use of technology and the management of the incidents in general. This paper explores the influence of human factors in cybersecurity incident operations, employing a human-technology interaction view to analyse cognitive and behavioural aspects of the decision-making processes, communication dynamics, and stress management. Through a literature review, we identify key challenges in human-factors research within the context and conceptualise them according to the well-known Technology-Human-Task-Context (THTC) framework. The findings highlight the necessity of integrating cognitive and affective considerations into cybersecurity frameworks to optimise response strategies and reduce the impact of security incidents. These insights help us contextualise and extend the initial framework to provide better understanding of human-technology interaction in cybersecurity incident management. By addressing these human-centric challenges, organisations can enhance their cybersecurity posture and foster a more resilient incident response ecosystem.