The Work of Cybersecurity Advocates

Cyber attacks are on the rise, endangering our sensitive information at an alarming rate. Cybersecurity advocates attempt to counter this wave of attacks by promoting security best practices. Their impact on organizational uptake varies and there is little research to understand this. Our study explores the motivations, characteristics, and practices of cybersecurity advocates. Eight preliminary interviews reveal that successful advocates must not only possess technical skills, but also a strong orientation toward service, people, context, and communication. Implications may include training and tools that better support security advocacy efforts.