Cybersecurity Evaluation in Perspective: A Scoping Review of People, Process, and Technology

Cybersecurity is an escalating global concern affecting different facets of society, causing increasing uncertainties and risks in the management of critical infrastructures. Effectively capturing its complexity is key to developing adaptive mechanisms to address emergent challenges. This hinges on adequate evaluation to understand the interconnections between people, processes, and technology in developing cybersecurity prevention, response, and mitigation strategies. The oversimplified assumption of techno-determinism that technology is the primary force shaping human history and societal conditions creates a reductionist view of the role of technology. While the work environment, social contexts, cultural norms, and institutional processes influence the development and utilization of technology, these remain unclear within cybersecurity evaluation context. This study is a scoping review investigating the current state of cybersecurity evaluation related to people, process, and technology to explore the depth and potential applications of available knowledge to enhance critical organizations’ cyber preparedness, response, and resilience.
Click to fill survey.

Thomas Archibald – Virginia Tech