Information Security Incident Management (ISIM) provides a strategic approach to monitoring and containing incidents. Integrating communication and awareness initiatives in the ISIM process has been identified as a critical means of improving information security (IS) protection. However, the arbitrary process of creating a shared understanding via effective awareness and communication efforts within the context of ISIM often negates the effective containment of incidents. Thus, this research aims to derive an effective strategy for enhancing the coordination of awareness and communication efforts supporting ISIM processes. Using the Design Science Research (DSR) methodology, a model was developed to address this challenge – designated a Coordinated Communication and Awareness approach toward enhancing ISIM (CCAISIM). The model highlights the significance of applying cognitive theories, like shared situational awareness and communication theories, such as the Interactive Model of Communication (IMC), to unify diverse stakeholders, including end users, and foster proactive engagement with ISIM. Using the DSR methodology, this model was empirically tested and received positive feedback. The model enhances collaboration among diverse stakeholders, including end users, by leveraging situational awareness and communication protocols. This unified understanding of ISIM creates a solution space for improving the shared understanding of IS incidents. It can also be applied to IS issues like insider threats and software risk management.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Integrating Situational Awareness and Communication in Information Security Incident Management: A Socio-Technical Perspective

  • Keshnee Padayachee,
  • Elias Worku Wordofa

摘要

Information Security Incident Management (ISIM) provides a strategic approach to monitoring and containing incidents. Integrating communication and awareness initiatives in the ISIM process has been identified as a critical means of improving information security (IS) protection. However, the arbitrary process of creating a shared understanding via effective awareness and communication efforts within the context of ISIM often negates the effective containment of incidents. Thus, this research aims to derive an effective strategy for enhancing the coordination of awareness and communication efforts supporting ISIM processes. Using the Design Science Research (DSR) methodology, a model was developed to address this challenge – designated a Coordinated Communication and Awareness approach toward enhancing ISIM (CCAISIM). The model highlights the significance of applying cognitive theories, like shared situational awareness and communication theories, such as the Interactive Model of Communication (IMC), to unify diverse stakeholders, including end users, and foster proactive engagement with ISIM. Using the DSR methodology, this model was empirically tested and received positive feedback. The model enhances collaboration among diverse stakeholders, including end users, by leveraging situational awareness and communication protocols. This unified understanding of ISIM creates a solution space for improving the shared understanding of IS incidents. It can also be applied to IS issues like insider threats and software risk management.