Exploring Team Competencies in Cybersecurity

Abstract

With the exponential increase of cyberattacks due to the ubiquitous adoption of remote work, strong and effective cybersecurity teams are indispensable. However, in-depth knowledge of team competencies in cybersecurity literature is scarce. This article reviews and suggests areas of improvement for cybersecurity teams through the lens of the existing attitudes, behaviors, and cognitions (ABCs) framework. Suggested areas for immediate improvement within cybersecurity teams include attitudinal variables such as cohesion, mutual trust, team reward attitude, and a cognitive variable known as shared mental models. Identifying relevant ABCs associated with the team competencies necessary for cybersecurity teams to be effective will be a critical step toward creating applicable measurement and training.

Get full access to this article

View all access options for this article.

References

Akoto

(2021). Accountability and cyber conflict: Examining institutional constraints on the use of cyber proxies. Conflict Management and Peace Science. https://doi.org/10.1177/07388942211051264

Austin

J. R.

(2003). Transactive memory in organizational groups: The effects of content, consensus, specialization, and accuracy on group performance. Journal of Applied Psychology, 88(5), 866–878. https://doi.org/10.1037/0021-9010.88.5.866

Bowers

C. A.

Braun

C. C.

Morgan

B. B.

(1997). Team workload: Its meaning and measurement. In Brannick

M. T.

Salas

Prince

(Eds.), Team performance and measurement: Theory, methods, and applications (pp. 85–108). Lawrence Erlbaum Associates. https://doi.org/10.4324/9781410602053

Buchler

La Fleur

C. G.

Hoffman

Rajivan

Marusich

Lightner

(2018). Cyber teaming and role specialization in a cyber security defense competition. Frontiers in Psychology, 9, Article 2133. https://doi.org/10.3389/fpsyg.2018.02133

Cooke

N. J.

Champion

Rajivan

Jariwala

(2013). Cyber situation awareness and teamwork. EAI Endorsed Transactions on Security and Safety, 1(2), Article e5. https://doi.org/10.4108/trans.sesa.01-06.2013.e5

Dawson

Thomson

(2018). The future cybersecurity workforce: Going beyond technical skills for successful cyber performance. Frontiers in Psychology, 9, 744. https://doi.org/10.3389/fpsyg.2018.00744

Dobson

G. B.

(2019). The Measures of cyber team performance.

Fauzi

M. A.

Yeng

Yang

Rachmayani

(2021). Examining the link between stress level and cybersecurity practices of hospital staff in Indonesia. The 16th International Conference on Availability, Reliability and Security, 1–8. https://doi.org/10.1145/3465481.3470094

Hackman

J. R.

(2002). Leading teams: Setting the stage for great performances. Harvard Business Press.

10.

Huang

(2015). Human-centric training and assessment for cyber situation awareness [Doctoral dissertation, University of Delaware]. UDSpace http://udspace.udel.edu/handle/19716/17558

11.

Jariwala

Champion

Rajivan

Cooke

N. J.

(2012). Influence of team communication and coordination on the performance of teams at the iCTF competition. Proceedings of the Human Factors and Ergonomics Society Annual Meeting, 56(1), 458–462. https://doi.org/10.1177/1071181312561044

12.

Jonker

C. M.

Riemsdijk

Vermeulen

(2010) Shared mental models. International Workshop on Coordination, Organizations, Institutions, and Norms in Agent Systems, 132–151. https://doi.org/10.1007/978-3-642-21268-0_8

13.

Kaur

Habibi Lashkari

(2021). Introduction to Cybersecurity. Understanding Cybersecurity Management in FinTech, 17–34. https://doi.org/10.1007/978-3030-79915-1_2

14.

Keebler

J. R.

Rosen

M. A.

Sittig

D. F.

Thomas

Salas

(2022). Human factors and ergonomics in healthcare: Industry demands and a path forward. Human Factors, 1–9. https://doi.org/10.1177/00187208211073623

15.

Killcrece

Kossakowski

K. P.

Ruefle

Zajicek

(2003). State of the practice of computer security incident response teams (CSIRTs). Carnegie Mellon Software Engineering Inst. https://apps.dtic.mil/sti/pdfs/ADA421664.pdf

16.

Lewis

(2004). Knowledge and performance in knowledge-worker teams: A longitudinal study of transactive memory systems. Management Science, 50(11), 1519–1533. https://doi.org/10.1287/mnsc.1040.0257

17.

Mathieu

Maynard

M. T.

Rapp

Gilson

(2008). Team effectiveness 1997-2007: A review of recent advancements and a glimpse into the future. Journal of Management, 34(3), 410–476. https://doi.org/10.1177/0149206308316061

18.

Mauer

Stackpole

Johnson

(2012). Developing small team-based cyber security exercises. The 2012 International Conference on Security and Management. https://scholarworks.rit.edu/other/301/

19.

Muncaster

(2021, March 4). Ransomware attacks soared 150% in 2020. Infosecurity. https://www.infosecuritymagazine.com/news/ransomware-attacks-soared-150-in/

20.

Orasanu

Salas

(1993) Team decision making in complex environments. In Klein

G. A.

Orasanu

G, J.

Calderwood

Zsambok

C.E.

(Eds.), Decision making in action: Models and methods (pp. 327–345). Ablex.

21.

Rajivan

Cooke

(2017). Impact of team collaboration on cybersecurity situational awareness. Theory and Models for Cyber Situation Awareness, 203–226. https://doi.org/10.1007/978-3-319-61152-5_8

22.

Rajivan

Champion

Cooke

N. J.

Jariwala

Dube

Buchanan

(2013). Effects of teamwork versus group work on signal detection in cyber defense teams. International Conference on Augmented Cognition, 172–180. https://doi.org/10.1007/978-3-642-39454-6_18

23.

Rouse

W. B.

Morris

N. M.

(1986) On looking into the black box: Prospects and limits in the search for mental models. Psychological Bulletin. 100(3), 349–363. https://doi.org/10.1037/0033-2909.100.3.349

24.

Salas

DiazGranados

Klein

Burke

C. S.

Stagl

K. C.

Goodwin

G. F.

Halpin

S. M.

(2008). Does team training improve team performance? A meta-analysis. Human Factors, 50(6), 903–933. https://doi.org/10.1518/001872008X375009

25.

Salas

Priest

H. A.

Stagl

K. C.

Sims

D. E.

Burke

C. S.

(2007). Work teams in organizations: A historical reflection and lessons learned. In Koppes

L. L.

(Ed.), Historical perspectives in industrial and organizational psychology (pp. 407–438). Lawrence Erlbaum Associates.

26.

Salas

Rosen

M. A.

Burke

C. S.

Goodwin

G. F.

(2008). The wisdom of collectives in organizations: An update of the teamwork competencies. In Salas

Goodwin

G. F.

Burke

C. S.

(Eds.), Team effectiveness in complex organizations: Cross-disciplinary perspectives and approaches (pp. 39–79). Routledge. https://doi.org/10.4324/9780203889312

27.

Salas

Sims

D. E.

Burke

C. S.

(2005). Is there “big five” in teamwork? Small Group Research, 36(5), 555–599. https://doi.org/10.1177/1046496405277134

28.

Sharton

B. R.

(2021, May 20). Ransomware attacks are spiking. Is your company prepared? Harvard Business Review. https://hbr.org/2021/05/ransomware-attacks-are-spiking-isyour-company-prepared

29.

Simonson

R. J.

Keebler

J. R.

Lessmiller

Richards

Lee

J. C.

(2020). Cybersecurity teamwork: A review of current practices and suggested improvements. Proceedings of the Human Factors and Ergonomics Society Annual Meeting, 64(1), 451–455. https://doi.org/10.1177/1071181320641101

30.

Weaver

S. J.

Lyons

DiazGranados

Rosen

M. A.

Salas

Oglesby

… King

H. B.

(2010). The anatomy of health care team training and the state of practice: A critical review. Academic Medicine, 85(11), 1746–1760. https://doi.org/10.1097/ACM.0b013e3181f2e907

31.

Wirth

Falkner

(2020). Cyberinsights: Cybersecurity as a team sport. Biomedical Instrumentation & Technology, 54(1), 64–67. https://doi.org/10.2345/0899-8205-54.1.64