Tags:Cyber Defense, Cybersecurity, Macrocognition, Metacognition and Training
Abstract:
Cybersecurity professionals are increasingly important due to the increase of security breaches in fields such as healthcare, government, and others (Hemphill & Longstreet, 2006). Cyber-defenders in particular carry out daunting and critical work to defend information systems from ever-increasing vulnerabilities (Shah et al., 2018). While cybersecurity experts are in high demand, there is not a clear educational path for emerging professionals to fill the gap in the market (Crumpler & Lewis, 2019). Although research is advancing the automation of network defense, little research has been conducted on the role of human cognition in the success of cybersecurity defenders, which remains critical in this complex environment. As a result, early-career cybersecurity defenders may not be well prepared for their roles as they could be (Crumpler & Lewis, 2019). In our presentation, we will present macrocognitive themes identified in our forthcoming publication (Schuster, in press) and describe their implications for research and practice. We will also propose a simple awareness training that introduces macrocognitive and metacognitive concepts to novice cybersecurity defenders to improve their performance. In the proposed awareness training, we will first identify the macrocognitive concepts of interest using (Schuster, in press) as a guide and focusing on concepts that have the most support in the literature for cybersecurity and related fields. Next, we will define the skills and knowledge to be trained. We will illustrate our approach with an example. Finally, we will describe how we will evaluate our training at the reaction and learning levels defined by Kirkpatrick (1959, 1996). The proposed study serves two aims. First, it could provide evidence for the efficacy of metacognitive training for macrocognitive skills. Second, the proposed study will capture of qualitative feedback from subject-matter expert (SME) participants.
Training for Macrocognitive Skills Awareness in Cybersecurity Professionals