Being Responsible in Cybersecurity: A Multi-Layered Perspective
通过对资深网络安全专业人士的访谈，研究识别了从技术、人力、组织到社会的多层次责任框架，并指出高层领导在促进跨层责任中的关键作用。
Abstract The paper posits that in the increasingly connected digital landscape, there is a growing need to examine the scale and scope of responsible cybersecurity. In an exploratory study that involved qualitative interviews with senior cybersecurity professionals, we identify different layers of responsible cybersecurity that span across techno-centric, human-centric, organizational (intra and inter) and societal centric perspectives. We present these in an onion-shaped framework and show that collectively these diverse perspectives highlight the linked responsibilities of different stakeholders both within and beyond the organization. The study also finds that senior leadership plays a crucial role in fostering responsible cybersecurity across the different layers. Implications for research and practice are discussed.