Cybersecurity Advocates: Force Multipliers in Security Behavior Change.

Area of Science:

• Cybersecurity
• Human-Computer Interaction
• Organizational Behavior

Background:

• Cybersecurity advocates play a crucial role in promoting positive security behaviors among individuals and organizations.
• Effective advocacy is essential for bridging the gap between technical security measures and user adoption.
• Understanding the characteristics of successful advocates can inform strategies for workforce development.

Purpose of the Study:

• To identify and describe the key qualities and characteristics of successful cybersecurity advocates.
• To provide practical insights for organizations seeking to recruit and train cybersecurity professionals in advocacy roles.
• To explore the implications of advocacy effectiveness for the broader cybersecurity workforce.

Main Methods:

• Qualitative research methods were employed to gather data on advocate behaviors and perceived success factors.
• Analysis of case studies and interviews with cybersecurity professionals in advocacy positions.
• Identification of common themes and attributes associated with effective cybersecurity advocacy.

Main Results:

• Successful advocates possess strong communication skills, empathy, and the ability to translate complex security concepts into understandable terms.
• Key qualities include building trust, fostering collaboration, and demonstrating a genuine commitment to security.
• Advocates who effectively influence behavior often have a deep understanding of user psychology and organizational dynamics.

Conclusions:

• The findings highlight the importance of 'people-oriented' skills in cybersecurity roles beyond traditional technical expertise.
• Recruiting and developing individuals with these identified advocate qualities can significantly enhance an organization's security posture.
• Investing in cybersecurity advocacy training is crucial for expanding a capable and effective cybersecurity workforce.