Research and Education as Key Success Factors for Developing a Cybersecurity Culture

The development and deployment of a cybersecurity culture and best practices among all stakeholders are a crucial issue for the information society. Based on two innovative initiatives in the field of education and research issued by the University of Lau

  • PDF / 228,635 Bytes
  • 14 Pages / 476.22 x 680.315 pts Page_size
  • 53 Downloads / 160 Views

DOWNLOAD

REPORT


Solange Ghernaouti and Bastien Wanner

Abstract

The development and deployment of a cybersecurity culture and best practices among all stakeholders are a crucial issue for the information society. Based on two innovative initiatives in the field of education and research issued by the University of Lausanne, this chapter points out mains stakes, challenges and constraints encountered by research activities in the field of cybersecurity and the fight against cybercrime, to improve skills, competences and measures that will contribute to obtain an effective cybersecurity culture.

38.1 Needs and Context The information economy, among other elements, heavily depends on cybersecurity. Without the latter, the former is unlikely to develop. On the other hand, cybersecurity is the result of technological development, organisational structure, legal frameworks and international cooperation. As a matter of fact, cybersecurity is a precondition for overall performance in the information society. Without a secure cyber environment, desired outcomes, such as innovation, growth and prosperity, could become wishful thinking. D ­ eveloping and less-developed

S. Ghernaouti (*) Université Lausanne, Lausanne, Switzerland e-mail: [email protected] B. Wanner Université de Lausanne, Lausanne, Switzerland e-mail: [email protected] © Springer Fachmedien Wiesbaden GmbH, ein Teil von Springer Nature 2018 M. Bartsch, S. Frey (Hrsg.), Cybersecurity Best Practices, https://doi.org/10.1007/978-3-658-21655-9_38

539

540

S. Ghernaouti and B. Wanner

countries may face significant challenges in meeting the requirements of the global market place without cybersecurity. The lack of know-how in all the dimensions of cybersecurity, namely, technical, legal, organisational and human dimensions, may lead to serious deficiency of vital national infrastructures and could enlarge and widen the digital divide. Against this backdrop, developing a global cybersecurity culture has been on the international agenda since at least the UN General Assembly adopted resolution 58/199  in 2004 [1]. The cybersecurity culture deals with key economic, legal and social issues related to information security in order to help countries get prepared to face issues and challenges linked to information and communication technologies (ICT) deployment, uses and misuses [2]. Information protection is a crucial task to take into consideration when developing an information society. At the crossroads of technological, legal, sociological, economic and political fields, cybersecurity is an interdisciplinary domain by nature. Depending on the country, it must reflect the vision, the culture and the civilisation of a nation as well as meet the specific security needs of the local context in which it is introduced. Because cybersecurity has a global dimension and deals with a large range of issues as ICT uses or misuses, technical measures and economic, legal and political issues, it is important to develop a global cybersecurity culture in order to raise the level of understandi