Beyond awareness

Abstract

As cyber security challenges have multiplied across society, there is increasing confusion about how those challenges should be addressed. For many years, computer security was the preserve of a small cadre within the IT profession: in most cases, limited to a few individuals in banks and those concerned with national security. It now seems to be widely accepted that this narrow perspective is simplistic and inadequate, because it fails to address some of the biggest problems. And yet a vision of cyber security as “everyone’s problem” seems equally untenable. Many people are simply not equipped to make meaningful decisions relating to this topic, whether in their private or professional lives. In addressing contemporary cyber security challenges, a “responsibility paradox” has therefore emerged: while cyber security extends beyond the purview of IT departments, leadership may be lacking in addressing the broad topic in all its dimensions. This chapter explores the value of involving an eclectic range of disciplines, organisations, and skill-sets in addressing cyber security challenges. Acknowledging the impracticalities of everyone becoming a “cyber security expert”, this chapter discusses practical measures for overcoming skill gaps. There is much work to be done – in understanding the challenge, and building the inter-disciplinary contexts in which the necessary deep changes in thought and practice can take place.