Competency Models for Information Security and Cybersecurity Professionals: Analysis of Existing Work and a New Model

Autor/inn/en	Bendler, Daniel; Felderer, Michael
Titel	Competency Models for Information Security and Cybersecurity Professionals: Analysis of Existing Work and a New Model
Quelle	In: ACM Transactions on Computing Education, 23 (2023) 2, Artikel 25 (33 Seiten)Infoseite zur Zeitschrift PDF als Volltext Verfügbarkeit
Zusatzinformation	ORCID (Bendler, Daniel) ORCID (Felderer, Michael)
Sprache	englisch
Dokumenttyp	gedruckt; online; Zeitschriftenaufsatz
Schlagwörter	Models; Information Security; Computer Security; Competence; Job Skills; Education Work Relationship; Holistic Approach + Suchen Sie Ihr Suchwort? Analogiemodell; Computervirus; Computersicherheit; Kompetenz; Produktive Fertigkeit; Holistischer Ansatz
Abstract	Competency models are widely adopted frameworks that are used to improve human resource functions and education. However, the characteristics of competency models related to the information security and cybersecurity domains are not well understood. To bridge this gap, this study investigates the current state of competency models related to the security domain through qualitative content analysis. Additionally, based on the competency model analysis, an evidence-based competency model is proposed. Examining the content of 27 models, we found that the models can benefit target groups in many different ways, ranging from policymaking to performance management. Owing to their many uses, competency models can arguably help to narrow the skills gap from which the profession is suffering. Nonetheless, the models have their shortcomings. First, the models do not cover all of the topics specified by the Cybersecurity Body of Knowledge (i.e., no model is complete). Second, by omitting social, personal, and methodological competencies, many models reduce the competency profile of a security expert to professional competencies. Addressing the limitations of previous work, the proposed competency model provides a holistic view of the competencies required by security professionals for job achievement and can potentially benefit both the education system and the labor market. To conclude, the implications of the competency model analysis and use cases of the proposed model are discussed. (As Provided).
Anmerkungen	Association for Computing Machinery. 2 Penn Plaza Suite 701, New York, NY 10121. Tel: 800-342-6626; Tel: 212-626-0500; Fax: 212-944-1318; e-mail: acmhelp@acm.org; Web site: http://toce.acm.org/
Erfasst von	ERIC (Education Resources Information Center), Washington, DC
Update	2024/1/01