Cybersecurity advocates: discovering the characteristics and skills of an emergent role
Information and Computer Security
ISSN: 2056-4961
Article publication date: 22 March 2021
Issue publication date: 17 August 2021
Abstract
Purpose
Cybersecurity advocates safeguard their organizations by promoting security best practices. This paper aims to describe the skills and characteristics of successful advocates.
Design/methodology/approach
This study involved 28 in-depth interviews of cybersecurity advocates.
Findings
Effective advocates possess not only technical acumen but also interpersonal skills, communication skills context awareness and a customer service orientation.
Practical implications
Non-technical skills are deemphasized in cybersecurity training, limiting career progression into the cybersecurity advocate role for existing security professionals and those from other disciplines. This paper suggests improvements for professional development that encourage greater security workforce diversity.
Originality/value
To the best of the authors’ knowledge, this study is the first to define and enumerate competencies for the role of cybersecurity advocate.
Keywords
Acknowledgements
The authors would like to thank the study participants for generously offering their time and insights. The authors would also like to thank the anonymous reviewers whose comments helped improve and clarify this manuscript.
Citation
Haney, J.M. and Lutters, W.G. (2021), "Cybersecurity advocates: discovering the characteristics and skills of an emergent role", Information and Computer Security, Vol. 29 No. 3, pp. 485-499. https://doi.org/10.1108/ICS-08-2020-0131
Publisher
:Emerald Publishing Limited
Copyright © 2021, Emerald Publishing Limited