A Study on Industrial Security Experts Demanding Forecasting in Intelligent Sensor Network

Abstract

There have been efforts made to come up with a solution through advancement based on developing technological solution. However, it has come to the point where various forms of the leakage centering on people that are the subject of core asset leakage cannot be solved through technological method. At present time in which the limitation of information security that seeks technological security has been clearly revealed, there is an increasing interest in industrial security for establishing convergence security system upon understanding technological/physical/managerial security measures and establishing security strategies. Accordingly, this paper conducted an analysis on the characteristics of industrial security manpower to present a vision and systematically cultivate industrial security experts manpower for protecting core technologies of companies in intelligent sensor network. In particular, occupational cluster of industrial security experts manpower was classified, which was verified by conducting case analysis. In addition, it estimated the demand for industrial security experts manpower by substituting it to the present condition of manpower of Korea. It is expected that the result of this study will be able to be used as basic information for cultivating industrial security experts manpower in intelligent sensor network.

1. Study Background

In recent years, computing environment is rapidly changing into ICT convergence environment using intelligent sensor network that is a form of convergence of ICT-traditional industry upon converging with various existing industries. For the purpose of gaining competitive advantage in the midst of such environment, companies are seeking corporate informatization innovation [1, 2]. Such innovation is becoming a means of ensuring corporate competitiveness through productivity enhancement and transaction cost reduction by advancing computing environment instead of simple changes in corporate management environment.

In recent years, the change into computing environment that is a means of informatization innovation of companies has become an essential element [3]. In computing environment, a company's core assets need to be safely protected by converting them into information for storage in an intangible state [4, 5]. However, such core assets are being easily leaked outside or to competitors. Such leakage of core asset is not only causing enormous damage to respective company but also affecting industry, society, and nation.

For the purpose of preventing the leakage of core assets that impedes the continuous growth of organization, there have been efforts made to come up with a solution through advancement based on developing technological solution. However, it has come to the point where various forms of the leakage centering on people that are the subject of core asset leakage cannot be solved through technological method. In the case of Korea, particularly, the main causes of technology leakage involve internal leakage by former/current employees that occupies about 80% in addition to external cyber-attack such as hacking and malware. It is also followed by technology leakage by partner companies with a continuous increasing trend of technology leakage resulting from financial allurement and personal profit.

In the midst of the current situation in which the limitation of information security that pursues technological security has been clearly revealed, there is an increasing interest in industrial security for developing convergence security system by establishing security strategy upon understanding technological/physical/managerial security measures. However, definition and job form of manpower in particular areas vary according to society, company, and national environment and system. In the case of Korea, the present condition is that analysis of job skills of manpower that will be responsible for industrial security area is lacking compared to that of information security manpower that has already been systemized.

Accordingly, the purpose of this study is to perform analysis on the characteristics of industrial security manpower and analyze according manpower demand research to present vision and systematically cultivate industrial security experts manpower to protect corporate core technologies in intelligent sensor network environment.

2. Previous Studies

2.1. Information and Industrial Security Comparison in Intelligent Sensor Network Environment

Li and Tang [6] have proposed a conceptual framework of information security engineering. This framework explicitly illustrates the methodological system, content system, procedures, and strategies for information security engineering research and practices.

Siponen and Willison [7] have analyzed BS7799, BS ISO/IEC17799: 2000, GASPP/GAISP, and SSE-CMM to determine and compare how these guidelines are validated and how widely they can be applied.

Gillies [8] has proposed a step-by-step framework designed to simplify the process for organizations working towards ISO27001 and offer significant benefits at milestones before systems are mature enough to achieve certification.

Vaughn Jr. et al. [9] have presented lessons learned and observations noted about the state of security-engineering practices by three information security practitioners with different perspectives.

Naedele [10] has examined the interests of the various stakeholders in the industrial security field (e.g., society, plant owners, service providers, automation vendors, and consultants) and evaluated some of the more visible industrial security initiatives (ISA, NERC, and IEC) with regard to stakeholder benefits and requirements. The paper then proceeds to give some details on the approach and current draft of the industrial control system security working group within IEC TC65.

Li [11] has discussed three tiers of the concept of industry as required by the study.

2.2. Manpower Skills Framework Study

Baraglia et al. [12] have proposed a new multicriteria job scheduler for scheduling a continuous stream of batch jobs on large-scale computing farms. Our solution, called convergent scheduler, exploits a set of heuristics that drives the scheduler in taking decisions. In order to validate the scheduler we proposed, it has been compared versus two common job scheduling algorithms.

Gould et al. [13] have considered the implications for nurses and their managers and the impact on university departments delivering continuing professional development for nurses. The new system has the potential to increase the human resources management aspect of the clinical nurse managers' role and could have legal implications, for example, if practitioners perceive that their needs for continuing professional development have been overlooked to the detriment of their pay and career aspirations. The new system also has implications for providers of continuing professional development in the universities and is likely to demand closer liaison between education providers and trust staff who commission education and training. The knowledge and skills framework is of interest to nurses and nurse educators internationally because the system, if effective, could be introduced elsewhere.

Walsh et al. [14] have presented the development of an interprofessional capability framework that articulates the learning outcomes that students need to achieve and continue to develop in order to become capable interprofessional workers. Although there tends to be a general agreement on the subject matter to be included under the rubric of interprofessional learning, little information is available regarding the learning outcomes students need to achieve in order to become effective interprofessional workers.

3. Industrial Security Experts Analysis in Intelligent Sensor Network Environment

3.1. Industrial Security Experts Structure Analysis (the Korean Case)

Industrial security experts manpower refers to experts manpower that has expert knowledge (capabilities) in managerial, physical, and technological security methods for industrial security based on extensive understanding on industrial security studies to protect industry technologies from encroachment elements and perform the duties of preventing illegal leakage and damage from disasters. It can also be understood through an extended scope including the protection of in/tangible assets from disasters such as fire, quake, and calamity, in addition to man-made disaster such as illegal leakage of industry technology.

For the purpose of analyzing the job skills of industrial security experts manpower, the literature research on industrial security occupational cluster and expert interviews were performed.

Occupational cluster of industrial security experts manpower can be mainly classified into industrial security planning and operation and industrial security method (measure). Industrial security planning and operation occupational cluster can be segmented into industrial security consulting (diagnosis), industrial security compliance (law), industrial security education, industrial security management (policy design and operation), and industrial security certification evaluation (inspection). The segmented occupational cluster can be defined as follows.

First off, industrial security consulting (diagnosis) occupational cluster refers to an expert occupational cluster that diagnoses the present condition of industrial security of organization to effectively (efficiently) respond against acts of industry technology leakage and present according countermeasures. Next, industrial security compliance (law) occupational cluster refers to experts that instruct and manage specific regulations and guidelines related to industrial security laws. In addition, industrial security education occupational cluster refers to experts that plan and perform education for organizational constituents to increase their awareness of industrial security and increase knowledge (capability). Industrial security management (policy design and operation) occupational cluster refers to experts that design policies from the perspective of organizational management for industrial security activities and implement (visualize) and operate industrial security activities. Lastly, industrial security certification evaluation (inspection) occupational cluster refers to experts that certify and evaluate organization on its status of establishing and operating management system to protect industry technologies. Industrial security method (measure) occupational cluster can be segmented into industrial security system development and establishment, industrial security guard and surveillance, and industrial security encroachment accident response (investigation). The segmented occupational cluster is defined as follows.

First off, industrial security system development and establishment occupational cluster refers to experts that develop, establish, and operate IT security system (document security system, database security system, network security system, etc.) to protect industry technology within organization. In addition, industrial security guard and surveillance occupational cluster refers to a group of experts that develop, establish, and operate physical security system (guard system, surveillance system, etc.) to protect industry technologies within organization. Lastly, industrial security encroachment accident response (investigation) occupational cluster refers to experts that perform activities of encroachment accident detection, early response, research (investigation), security measures, and follow-up measures.

These industrial security experts manpower occupational clusters can be displayed as shown in Figure 1.

Figure 1

Industrial security experts manpower occupational cluster design.

3.2. Industrial Security Experts Manpower Skills Analysis

In regard to the industrial security experts manpower occupational clusters classified based on previous literature research and expert meeting, their types and percentages will be analyzed in addition to the main duties. Accordingly, survey research was conducted with 63 demand organizations that need industrial security experts manpower.

First off, current status on the retention of industrial security product/service experts manpower was examined. For the purpose of researching the percentages (%) of industrial security product/service experts manpower, they were classified into security consulting, security system, security guard, security control, security education, security inspection/certification evaluation, and others based on a pilot test of previously classified industrial security experts occupational clusters.

In regard to industrial security experts manpower, security guard manpower occupied 57.4% in terms of simple number of manpower, thereby revealing the highest in number. It can be recalculated as shown in Figure 2 (the circle in the right side) as you look in detail the part excluding security guard manpower for physical security measures, and general administrative manpower and remaining classification of industrial security other occupational cluster. As for the percentages of manpower that comes up with technological security and managerial security measures, they were found to be in the order of 34.9% for industrial security system development manpower, 33.1% for industrial security control experts manpower, and 30.3% for security consulting experts manpower (see Figure 2). In addition, the percentage of security education and security inspection/certification evaluation manpower was found to be at a very low level.

Figure 2

Industrial security experts manpower (%).

Status on the availability of organization (staff) exclusively in charge of industrial security at target organization is as follows.

In the case of companies that have an exclusive organization consisting of more than two staffs, it was found that merely 6.3% and about 25.4% had only one dedicated staff. In particular, more than majority of the research targets were found to have no dedicated staff or staff that have additional duties (over 68.2%). Considering the seriousness of recent security accidents, establishing measures to supply manpower is urgently needed (see Figure 3).

Figure 3

Industrial security dedicated organization (staff) availability (%).

The reason for not having such dedicated organization or staff in charge of industrial security was researched. The results were found to be in the order of high labor cost for industrial security experts manpower (37.3%), followed by cost and time required for internal education and training (22.4%). Accordingly, it would be necessary to supply well-qualified manpower that can meet the demand, along with education course for systematically reeducating existing business manpower (see Figure 4).

Figure 4

Reasons for lack of industrial security dedicated organization and staff.

In addition, relatively organizational structure of industrial security staff (in charge) and information security (IT security) staff in charge was examined. In terms of industrial security staff (in charge) and information security (IT security) staff (in charge) within organization existing separately as equal status, as shown in Figure 5, the percentage was found to be the highest with 42.9%, followed by the case of having additional duties with 33.3%.

Figure 5

Relatively organizational structure of industrial security staff and information security staff.

Meanwhile, main duties of industrial security experts manpower were analyzed and the result showed that they deal with multidimensional studies of law/policy, management, crime, and technology. As shown in Figure 5, academic system was classified and the most preferred major was engineering, followed by business and economics and law (see Figure 6).

Figure 6

Industrial security experts manpower hiring priority.

In addition, the result showed that companies want certification education to quickly cultivate and supply industrial security experts manpower according to company scale, and, in the case of wanting multidimensional knowledge, the result showed that they preferred university curriculum.

3.3. Industrial Security Experts Manpower Demand Analysis

Based on the result of industrial security experts manpower job skills analysis, analysis was conducted to forecast the demand for industrial security experts manpower for the next five years for the advancement of industrial security and cultivation of manpower. For the demand forecasting of industrial security experts manpower, increase in the demand for industrial security manpower was forecasted by dividing the demand into new demand and alternative demand. The new demand refers to demand for manpower by organizations resulting from establishing industrial security dedicated organization. The alternative demand refers to demand for manpower resulting from retirement and job change of existing industrial security manpower.

Formula 1 (new demand formula). Consider

$$\begin{array}{l}\left(\mathrm{N}\mathrm{e}\mathrm{w}\hspace{0.17em}\hspace{0.17em}\mathrm{D}\mathrm{e}\mathrm{m}\mathrm{a}\mathrm{n}\mathrm{d}\right)\hfill \\ \hspace{1em}=\left(\mathrm{N}\mathrm{u}\mathrm{m}\mathrm{b}\mathrm{e}\mathrm{r}\hspace{0.17em}\hspace{0.17em}\mathrm{o}\mathrm{f}\hspace{0.17em}\hspace{0.17em}\mathrm{M}\mathrm{e}\mathrm{a}\mathrm{n}\hspace{0.17em}\hspace{0.17em}\mathrm{M}\mathrm{a}\mathrm{n}\mathrm{p}\mathrm{o}\mathrm{w}\mathrm{e}\mathrm{r}\hspace{0.17em}\hspace{0.17em}\mathrm{o}\mathrm{f}\mathrm{\hspace{0.17em}\hspace{0.17em}}\mathrm{O}\mathrm{r}\mathrm{g}\mathrm{a}\mathrm{n}\mathrm{i}\mathrm{z}\mathrm{a}\mathrm{t}\mathrm{i}\mathrm{o}\mathrm{n}\right)\hfill \\ \hspace{1em}\hspace{1em}\times \left(\mathrm{I}\mathrm{n}\mathrm{d}\mathrm{u}\mathrm{s}\mathrm{t}\mathrm{r}\mathrm{i}\mathrm{a}\mathrm{l}\hspace{0.17em}\hspace{0.17em}\mathrm{S}\mathrm{e}\mathrm{c}\mathrm{u}\mathrm{r}\mathrm{i}\mathrm{t}\mathrm{y}\hspace{0.17em}\hspace{0.17em}\mathrm{E}\mathrm{x}\mathrm{p}\mathrm{e}\mathrm{r}\mathrm{t}\mathrm{s}\hspace{0.17em}\hspace{0.17em}\mathrm{M}\mathrm{a}\mathrm{n}\mathrm{p}\mathrm{o}\mathrm{w}\mathrm{e}\mathrm{r}\hspace{0.17em}\hspace{0.17em}\mathrm{N}\mathrm{e}\mathrm{w}\right.\hfill \\ \phantom{hhhhhhh}\left.\mathrm{H}\mathrm{i}\mathrm{r}\mathrm{i}\mathrm{n}\mathrm{g}\hspace{0.17em}\hspace{0.17em}\mathrm{P}\mathrm{e}\mathrm{r}\mathrm{c}\mathrm{e}\mathrm{n}\mathrm{t}\mathrm{a}\mathrm{g}\mathrm{e}\right)\hfill \\ \hspace{1em}\hspace{1em}+\left(\mathrm{N}\mathrm{u}\mathrm{m}\mathrm{b}\mathrm{e}\mathrm{r}\mathrm{\hspace{0.17em}\hspace{0.17em}}\mathrm{o}\mathrm{f}\mathrm{\hspace{0.17em}\hspace{0.17em}}\mathrm{N}\mathrm{e}\mathrm{w}\mathrm{\hspace{0.17em}\hspace{0.17em}}\mathrm{C}\mathrm{o}\mathrm{m}\mathrm{p}\mathrm{a}\mathrm{n}\mathrm{i}\mathrm{e}\mathrm{s}\mathrm{\hspace{0.17em}\hspace{0.17em}}\mathrm{C}\mathrm{r}\mathrm{e}\mathrm{a}\mathrm{t}\mathrm{e}\mathrm{d}\right)\hfill \\ \hspace{1em}\hspace{1em}\times \left(\mathrm{N}\mathrm{u}\mathrm{m}\mathrm{b}\mathrm{e}\mathrm{r}\mathrm{\hspace{0.17em}\hspace{0.17em}}\mathrm{o}\mathrm{f}\mathrm{\hspace{0.17em}\hspace{0.17em}}\mathrm{I}\mathrm{n}\mathrm{d}\mathrm{u}\mathrm{s}\mathrm{t}\mathrm{r}\mathrm{i}\mathrm{a}\mathrm{l}\mathrm{\hspace{0.17em}\hspace{0.17em}}\mathrm{S}\mathrm{e}\mathrm{c}\mathrm{u}\mathrm{r}\mathrm{i}\mathrm{t}\mathrm{y}\mathrm{\hspace{0.17em}\hspace{0.17em}}\mathrm{E}\mathrm{x}\mathrm{p}\mathrm{e}\mathrm{r}\mathrm{t}\mathrm{s}\right.\hfill \\ \phantom{\mathrm{h}\mathrm{h}\mathrm{h}\mathrm{h}\mathrm{h}\mathrm{h}\mathrm{h}}\left.\mathrm{M}\mathrm{a}\mathrm{n}\mathrm{p}\mathrm{o}\mathrm{w}\mathrm{e}\mathrm{r}\mathrm{\hspace{0.17em}\hspace{0.17em}}\mathrm{f}\mathrm{o}\mathrm{r}\mathrm{\hspace{0.17em}\hspace{0.17em}}\mathrm{S}\mathrm{t}\mathrm{a}\mathrm{b}\mathrm{l}\mathrm{e}\mathrm{\hspace{0.17em}\hspace{0.17em}}\mathrm{S}\mathrm{e}\mathrm{c}\mathrm{u}\mathrm{r}\mathrm{i}\mathrm{t}\mathrm{y}\mathrm{\hspace{0.17em}\hspace{0.17em}}\mathrm{M}\mathrm{a}\mathrm{n}\mathrm{a}\mathrm{g}\mathrm{e}\mathrm{m}\mathrm{e}\mathrm{n}\mathrm{t}\right).\hfill \end{array}$$

(1)

Formula 2 (alternative demand formula). Consider

$$\begin{array}{l}\left(\mathrm{A}\mathrm{l}\mathrm{t}\mathrm{e}\mathrm{r}\mathrm{n}\mathrm{a}\mathrm{t}\mathrm{i}\mathrm{v}\mathrm{e}\hspace{0.17em}\hspace{0.17em}\mathrm{D}\mathrm{e}\mathrm{m}\mathrm{a}\mathrm{n}\mathrm{d}\right)\hfill \\ \hspace{1em}=\left(\mathrm{N}\mathrm{u}\mathrm{m}\mathrm{b}\mathrm{e}\mathrm{r}\hspace{0.17em}\hspace{0.17em}\mathrm{o}\mathrm{f}\hspace{0.17em}\hspace{0.17em}\mathrm{M}\mathrm{e}\mathrm{a}\mathrm{n}\hspace{0.17em}\hspace{0.17em}\mathrm{M}\mathrm{a}\mathrm{n}\mathrm{p}\mathrm{o}\mathrm{w}\mathrm{e}\mathrm{r}\hspace{0.17em}\hspace{0.17em}\mathrm{o}\mathrm{f}\hspace{0.17em}\hspace{0.17em}\mathrm{O}\mathrm{r}\mathrm{g}\mathrm{a}\mathrm{n}\mathrm{i}\mathrm{z}\mathrm{a}\mathrm{t}\mathrm{i}\mathrm{o}\mathrm{n}\right)\hfill \\ \hspace{1em}\hspace{1em}\times \left(\mathrm{R}\mathrm{e}\mathrm{t}\mathrm{i}\mathrm{r}\mathrm{e}\mathrm{m}\mathrm{e}\mathrm{n}\mathrm{t}\hspace{0.17em}\hspace{0.17em}\mathrm{a}\mathrm{n}\mathrm{d}\hspace{0.17em}\hspace{0.17em}\mathrm{J}\mathrm{o}\mathrm{b}\hspace{0.17em}\hspace{0.17em}\mathrm{C}\mathrm{h}\mathrm{a}\mathrm{n}\mathrm{g}\mathrm{e}\hspace{0.17em}\hspace{0.17em}\mathrm{P}\mathrm{e}\mathrm{r}\mathrm{c}\mathrm{e}\mathrm{n}\mathrm{t}\mathrm{a}\mathrm{g}\mathrm{e}\right)\hfill \\ \hspace{1em}\hspace{1em}\times \left(\mathrm{T}\mathrm{o}\mathrm{t}\mathrm{a}\mathrm{l}\hspace{0.17em}\hspace{0.17em}\mathrm{I}\mathrm{n}\mathrm{d}\mathrm{u}\mathrm{s}\mathrm{t}\mathrm{r}\mathrm{i}\mathrm{a}\mathrm{l}\hspace{0.17em}\hspace{0.17em}\mathrm{S}\mathrm{e}\mathrm{c}\mathrm{u}\mathrm{r}\mathrm{i}\mathrm{t}\mathrm{y}\hspace{0.17em}\hspace{0.17em}\mathrm{E}\mathrm{x}\mathrm{p}\mathrm{e}\mathrm{r}\mathrm{t}\mathrm{s}\right.\hfill \\ \phantom{hhhhhhh}\left.\mathrm{M}\mathrm{a}\mathrm{n}\mathrm{p}\mathrm{o}\mathrm{w}\mathrm{e}\mathrm{r}\hspace{0.17em}\hspace{0.17em}\mathrm{P}\mathrm{e}\mathrm{r}\mathrm{c}\mathrm{e}\mathrm{n}\mathrm{t}\mathrm{a}\mathrm{g}\mathrm{e}\right).\hfill \end{array}$$

(2)

Based on the above formulas, major figures for forecasting industrial security experts manpower are as shown in Table 1.

Table 1

Major figures for forecasting industrial security experts manpower demand.

(i) Growth rate of number of workers: 1.0%
(ii) Growth rate of number of companies: 0.6%
(iii) Percentage of retirement and job change: 1%
(iv) Percentage of industrial security experts manpower retention: 31.7%
(v) Percentage of industrial security experts manpower new recruitment: 8%

These major figures were entered into the present condition of Korea to forecast the demand for industrial security experts manpower. The results are as shown in Table 2 showing that manpower demand of about 150,000 workers will occur in the next five years.

Table 2

Industrial security experts manpower demand forecast (the Korean case).

Classification	2015 (Y)	2016 (Y)	2017 (Y)	2018 (Y)	2019 (Y)
New demand	27,376	27,540	27,706	27,872	28,039
Alternative demand	2,190	2,203	2,216	2,229	2,243
Total demand	29,566	29,743	29,922	30,101	30,282

4. Conclusion and Future Study

In recent years, the change into computing environment that is a means of informatization innovation of companies has become an essential element. However, a company's core assets that need to be safely protected by converting them into information for storage in an intangible state are being easily leaked outside or to competitors. Such leakage of core asset is not only causing enormous damage to respective company but also affecting industry, society, and nation.

For the purpose of preventing the leakage of core assets that impedes the continuous growth of organization, there have been efforts made to come up with a solution through advancement based on developing technological solution. However, it has come to the point where various forms of the leakage centering on people that are the subject of core asset leakage cannot be solved through technological method.

At present time in which the limitation of information security that seeks technological security has been clearly revealed, there is an increasing interest in industrial security for establishing convergence security system upon understanding technological/physical/managerial security measures and establishing security strategies.

Accordingly, this paper conducted an analysis on the characteristics of industrial security manpower to present a vision and systematically cultivate industrial security experts manpower for protecting core technologies of companies. The result can be summarized as follows.

• (i)

Occupational cluster of industrial security experts can be mainly classified into industrial security planning and operation and industrial security method (measure). Industrial security planning and operation occupational cluster can be segmented into industrial security consulting (diagnosis), industrial security compliance (law), industrial security education, industrial security management (policy design and operation), and industrial security certification evaluation (inspection). Industrial security method (measure) occupational cluster can be segmented into industrial security system development and establishment, industrial security guard and surveillance, and industrial security encroachment accident response (investigation).

(ii)

Among the classified industrial security experts manpower occupations, security consulting, security system, security guard, security control, and security investigation/certification evaluation manpower occupied about 80% of the entire industrial security manpower.

(iii)

Industrial security staff (in charge) and information security staff (in charge) were mostly highly distributed with equal structure of relative status within organization.

(iv)

It was found that convergence knowledge in various aspects consisting of engineering, business and economics, law, and humanities and society was needed as job skills of industrial security experts manpower.

(v)

It is expected that the result of this study will be able to be used as basic information for cultivating industrial security experts manpower in intelligent sensor network. As for future study, a study on the present condition of industrial security experts manpower demand and job transfer path will be conducted.