Human and Organizational Issues for Resilient Communications
| Autor: | Antonios Gouglidis, Mark Rouncefield, Karen Hough, Tom Anderson, David Hutchison, Jeremy Busby |
|---|---|
| Rok vydání: | 2020 |
| Předmět: | |
| Zdroj: | Computer Communications and Networks ISBN: 9783030446840 Guide to Disaster-Resilient Communication Networks |
| DOI: | 10.1007/978-3-030-44685-7_32 |
| Popis: | Human and organizational issues are able to create both vulnerabilities and resilience to threats. In this chapter, we investigate human and organizational factors, conducted through ethnographic studies of operators and sets of interviews with staff responsible for security, reliability and quality in two different organizations, which own and operate utility networks. Ethnography is a qualitative aspect of research that emphasizes the detailed observation and interviewing of people in naturally occurring settings. Our findings indicate that ‘human error’ forms the biggest threat to cyber-security and that there is a need for security operations centres to document all cyber-security incidents. Also, we conclude that it will always be insufficient to assess mental security models in terms of their technical correctness, as it is sometimes more important to know how well they represent prevailing social issues and requirements. As a practical recommendation from this work, we suggest that utility organizations (and others) engage in penetration testing and perhaps other forms of vulnerability analysis, not only to discover specific vulnerabilities but also to learn more about the mental models they use. |
| Databáze: | OpenAIRE |
| Externí odkaz: |
|