ICTBC (CCCI): Pedagogical, Didactic and Technical Strategy to Facilitate the Understanding of an Industrial Cybersecurity Model Based on an Innovative Engineering Process Through the Conceptual Improvement of the McCumber Cube
摘要
The Industrial Cybersecurity Tinker Bell Cube (ICTBC), also known Cubo Campanito de Ciberseguridad Industrial (CCCI), is a new cybersecurity framework and a methodological, technical and pedagogical innovation derived from the design of a cybersecurity model tailored to the small and medium-sized enterprises (SMEs) in Colombia’s flexographic industry, with applicability to other essential sectors with critical production chain. ICTBC framework emerged as result of a master’s thesis in computer security, focused on the digital protection of computing infrastructures that operate critical production process and chains. Built upon an innovative engineering process that updates and extends the McCumber cube, the new ICTBC framework serves as conceptual and technical cybersecurity guideline for the design, development, adoption and implementation of digital protection prototypes in essential industries. Its double dimension enables the translation of complex cybersecurity concepts into accessible language for executives and non-specialized personnel, fostering understanding, adaptation, and integration of protection models across all organizational levels. Additionally of their natural and intrinsic technical value, the ICTBC framework can be considered like an open educational resource (OER) and learning object (LO), with the potential to strengthen cybersecurity culture in both academic and industrial contexts. Its structure supports active learning, conceptual appropriation and technical guideline and knowledge transference in critical production environments contributing to the development of resilient organizations. Thus, the ICTBC framework is positioned as a new benchmark for industrial cybersecurity that will promote the adoption of cyber protection models and awareness, education and learning of a strong information security culture in essential industries.