Mitigating cyber attacks through the measurement of non-IT professionals’ cybersecurity skills

Abstract

Purpose Users’ mistakes due to poor cybersecurity skills result in up to 95 per cent of cyber threats to organizations. Threats to organizational information systems continue to result in substantial financial and intellectual property losses. This paper aims to design, develop and empirically test a set of scenarios-based hands-on tasks to measure the cybersecurity skills of non-information technology (IT) professionals. Design/methodology/approach This study was classified as developmental in nature and used a sequential qualitative and quantitative method to validate the reliability of the Cybersecurity Skills Index (CSI) as a prototype-benchmarking tool. Next, the prototype was used to empirically test the demonstrated observable hands-on skills level of 173 non-IT professionals. Findings The importance of skills and hands-on assessment appears applicable to cybersecurity skills of non-IT professionals. Therefore, by using an expert-validated set of cybersecurity skills and scenario-driven tasks, this study established and validated a set of hands-on tasks that measure observable cybersecurity skills of non-IT professionals without bias or the high-stakes risk to IT. Research limitations/implications Data collection was limited to the southeastern USA and while the sample size of 173 non-IT professionals is valid, further studies are required to increase validation of the results and generalizability. Originality/value The validated and reliable CSI operationalized as a tool that measures the cybersecurity skills of non-IT professionals. This benchmarking tool could assist organizations with mitigating threats due to vulnerabilities and breaches caused by employees due to poor cybersecurity skills.

Versioning Catcher Software (VCS) untuk mendeteksi Sensitive Information File Versioning pada Linux Server

“…Carlton, Levy, Ramim (2019) [12], menyebutkan bahwa kesalahan pengguna yang memiliki kemampuan cybersecurity yang buruk dapat mengakibatkan ancaman dunia maya terhadap suatu organisasi hingga 95 persen. Hal ini akan berdampak juga terhadap finansial dan kekayaan intelektual yang substansial.…”

Modelo SOCIA. Una reflexión conceptual y práctica desde la perspectiva del adversario

“…SOCIA es una apuesta conceptual de uso ágil para utilizar en el contexto corporativo, con el fin de crear conciencia situacional [13] y reflexiones prospectivas sobre posibles adversarios que pueden tener las organizaciones. Para lograrlo, se parte de la revisión de situaciones previamente materializadas tanto a nivel nacional como internacional, que permitan una visión sistémica de los retos que plantea un atacante, y la participación de diferentes perfiles de colaboradores en la empresa [14,17].…”

Learning analytics performance improvement design (LAPID) in higher education: Framework and concerns

“…One more concern, which might be overlooked, is cybersecurity and the need to protect such sensitive data. Business organizations are exposed to vulnerabilities and breaches that entail substantial financial and intellectual property losses, which are caused by employees due to poor cybersecurity skills (Carlton, Levy, & Ramim, 2019). Many educational institutions do not have the awareness, as well as the resources needed to effectively secure highly sensitive LA and LAD derivative outcomes such as retention figures, student's success predictions, and managerial dashboards.…”