CyberOps: Situational Awareness in Cybersecurity Operations

TL;DR

This paper explores operational factors influencing situational awareness in CyberOps, focusing on human and technical elements that enhance understanding, decision-making, and security in cybersecurity operations.

Contribution

It provides a comprehensive analysis of operational factors affecting CyberOps situational awareness, integrating human, technical, and procedural aspects.

Findings

Identification of key operational factors affecting awareness

Insights into human decision-making in cybersecurity

Recommendations for improving CyberOps effectiveness

Abstract

Cybersecurity operations, CyberOps, is the use and application of cybersecurity capabilities to a domain, department, organisation or nation. It is fundamentally to protect digital investments, contribute to national economic wellbeing by providing a safe, secure and conducive environment to conduct business and to protect national critical national infrastructures and citizens welfare. In this paper, we investigate operational factors that influence situational awareness of CyberOps, specifically, the features that deals with understanding and comprehension of operational and human factors aspects and that helps with insights on human operator decision making such as cognition, teamwork, knowledge, skills and abilities. The operational factors discussed in this paper range from tools, techniques, integration, architecture to automation, cognition, people, policy, process and procedures.