CyberOps: Situational Awareness in Cybersecurity Operations
It addresses the problem of improving situational awareness for cybersecurity operators, but appears incremental as it reviews existing factors without introducing new methods or data.
The paper investigates operational factors influencing situational awareness in cybersecurity operations, focusing on understanding human and operational aspects to gain insights into decision-making, but does not report specific results or numbers.
Cybersecurity operations, CyberOps, is the use and application of cybersecurity capabilities to a domain, department, organisation or nation. It is fundamentally to protect digital investments, contribute to national economic wellbeing by providing a safe, secure and conducive environment to conduct business and to protect national critical national infrastructures and citizens welfare. In this paper, we investigate operational factors that influence situational awareness of CyberOps, specifically, the features that deals with understanding and comprehension of operational and human factors aspects and that helps with insights on human operator decision making such as cognition, teamwork, knowledge, skills and abilities. The operational factors discussed in this paper range from tools, techniques, integration, architecture to automation, cognition, people, policy, process and procedures.