The Role of Human Factors in Cybersecurity Incident Management
摘要
Cybersecurity incident management is a critical aspect of organisational resilience, integrating both technical and human-centric solutions for security assurance. While technological advancements are indispensable for the enhancement of cybersecurity operations and capabilities, humans, who are the core of these systems, play a decisive role in the effective use of technology and the management of the incidents in general. This paper explores the influence of human factors in cybersecurity incident operations, employing a human-technology interaction view to analyse cognitive and behavioural aspects of the decision-making processes, communication dynamics, and stress management. Through a literature review, we identify key challenges in human-factors research within the context and conceptualise them according to the well-known Technology-Human-Task-Context (THTC) framework. The findings highlight the necessity of integrating cognitive and affective considerations into cybersecurity frameworks to optimise response strategies and reduce the impact of security incidents. These insights help us contextualise and extend the initial framework to provide better understanding of human-technology interaction in cybersecurity incident management. By addressing these human-centric challenges, organisations can enhance their cybersecurity posture and foster a more resilient incident response ecosystem.