Integrating Situational Awareness and Communication in Information Security Incident Management: A Socio-Technical Perspective
摘要
Information Security Incident Management (ISIM) provides a strategic approach to monitoring and containing incidents. Integrating communication and awareness initiatives in the ISIM process has been identified as a critical means of improving information security (IS) protection. However, the arbitrary process of creating a shared understanding via effective awareness and communication efforts within the context of ISIM often negates the effective containment of incidents. Thus, this research aims to derive an effective strategy for enhancing the coordination of awareness and communication efforts supporting ISIM processes. Using the Design Science Research (DSR) methodology, a model was developed to address this challenge – designated a Coordinated Communication and Awareness approach toward enhancing ISIM (CCAISIM). The model highlights the significance of applying cognitive theories, like shared situational awareness and communication theories, such as the Interactive Model of Communication (IMC), to unify diverse stakeholders, including end users, and foster proactive engagement with ISIM. Using the DSR methodology, this model was empirically tested and received positive feedback. The model enhances collaboration among diverse stakeholders, including end users, by leveraging situational awareness and communication protocols. This unified understanding of ISIM creates a solution space for improving the shared understanding of IS incidents. It can also be applied to IS issues like insider threats and software risk management.