Measuring Human Performance within Computer Security Incident Response Teams

Abstract

Human performance has become a pertinent issue within cyber security. However, this research has been stymied by the limited availability of expert cyber security professionals. This is partly attributable to the ongoing workload faced by cyber security professionals, which is compounded by the limited number of qualified personnel and turnover of personnel across organizations. Additionally, it is difficult to conduct research, and particularly, openly published research, due to the sensitivity inherent to cyber operations at most organizations. As an alternative, the current research has focused on data collection during cyber security training exercises. These events draw individuals with a range of knowledge and experience extending from seasoned professionals to recent college graduates to college students. The current paper describes research involving data collection at two separate cyber security exercises. This data collection involved multiple measures which included behavioral performance based on human-machine transactions and questionnairebased assessments of cyber security experience.

Which Tools in Multimedia Are Best for Learning Outcomes? A Study Grounded in Cognitive Load Structures

“…As stated by Jøsok (2020), the available research literature confirms that cyber operators are subject to high cognitive load. This is due to the information-intensive character of work, such as network surveillance (D' Amico et al, 2005), organizational factors of a network-enabled operations environment (Buchler et al, 2016), and the need to perform low-level analysis and high-level analysis continuously (McClain et al, 2015).…”