Cyber Security Awareness Platform

While significant investments have been made to support new cyber security technologies, there is still a reliance on humans to withstand the actions of attackers or other malicious actors. Cybersecurity is fundamentally about an organization’s ability to protect its assets from those who wish to do harm; therefore, cyber security has changed from simply being about technology to having a much broader mission — that of developing human resources and enabling employees to be more effective protectors of the organization’s assets. This paper presents the Cognitive Resilience Framework for Cyber Security (CRFCS) as a new model of an organization’s ability to protect against cyberattack, focusing on how to create psychological capital for the personnel within the organization to ensure their psychosocial resilience to cyberattack. Human security capabilities should be viewed as renewable resource based on a combination of cognitive psychology, organizational behavior theory and security science. Thus, it is imperative to reframe the concept of organization security from a compliance-driven training approach to one that facilitates building human security abilities as part of the overall organizational capabilities of building human assets. This work provides the methodology to develop, measure and leverage human security as strategic organizations capability.