The Human Element: Skills to Teach Cybersecurity Students

Membership banner - K-12

With the role of humans in computer science in flux due to emerging capabilities of artificial intelligence and changing business models for staff responsibilities, the case should be made to provide cybersecurity students with opportunities to build strong communication and interpersonal relationship skills. These skills still make a significant difference in the effectiveness of a cybersecurity program:

Psychology

Awareness and understanding of how and why others think and act provides a strong foundation for improving organizational cybersecurity culture and compliance. Understanding why people do or do not follow cybersecurity safeguards allows a shift from focusing on rule enforcement to instead focusing on effectively helping people incorporate safeguards into their jobs. In addition, better understanding of human nature gives insight into why attack techniques such as social engineering and phishing continue to be impactful.

Verbal Communication

By developing intervew and listening skills, cybersecurity students gain insight into how to move from understanding security safeguards to successfully implementing those safeguards. For example, facilitating conversations with a cybersecurity steering committee, presenting to staff about why and how to follow controls, and gathering information during a cyber incident investigation are all aided by verbal communication skills.

Written Communication

Although artificial intelligence large language models may provide students with helpful suggestions to improve the professional content of their communications as well as the tone, students who have stronger written communication skills can better convey a human voice through their writing. In the cyber realm the ability to create, documentation, policies, procedures, plans, playbooks and written training are all helpful to advance organizational security.

Collaboration

As much as many students dislike relying on other students during group projects, the reality of cybersecurity in most organizations is that progress requires collaboration. The ability to work with others includes compromise and negotiation skill builing as well as learning how to effectively motivate. Group projects may not be popular, but for most organizations, building a cybersecurity program is a group project.

With the changing information technology era, building human understanding, interpersonal and communication skills in the next generation of cybersecurity professionals prepares them to better navigate the future.