Cybersecurity Advocates: Discovering the Characteristics and Skills for an Emergent Role

Published

April 7, 2021

Author(s)

Julie Haney, Wayne Lutters

Abstract

Purpose: Cybersecurity advocates attempt to reduce exposure to cyber attacks by promoting security best practices and encouraging security adoption. However, little is known about the skills necessary for success in this role. To fill this gap, our study explores the professional attributes of cybersecurity advocates. Methodology: We conducted 28 in-depth interviews of cybersecurity advocates. Findings: Our analysis reveals that effective advocates not only possess technical acumen, but also interpersonal skills, communication skills, context awareness, and a customer service orientation. Originality: We are the first to define and enumerate competencies for the role of cybersecurity advocate. Implications: Non-technical skills are often missing from cybersecurity training, limiting career progression into the cybersecurity advocate role for existing security professionals and those from other disciplines. We discuss implications of our findings for improving professional development opportunities and encouraging greater workforce diversity within the cybersecurity advocacy field.

Citation

International Journal of Information and Computer Security

Volume

29

Issue

3

Pub Type

Journals

Download Paper

https://doi.org/10.1108/ICS-08-2020-0131

Local Download

Keywords

security professionals, advocacy, discipline diversity, cybersecurity education, work roles

Citation

Haney, J. and Lutters, W. (2021), Cybersecurity Advocates: Discovering the Characteristics and Skills for an Emergent Role, International Journal of Information and Computer Security, [online], https://doi.org/10.1108/ICS-08-2020-0131, https://tsapps.nist.gov/publication/get_pdf.cfm?pub_id=930771 (Accessed May 31, 2025)