Situation Awareness (SA) of operators in Cyber Security (CS) has been assumed important for effective incident response in critical infrastructure. Many previous studies have proposed tools and methods to improve SA, but there is a general lack of empirical evidence on the impact of SA on performance in this domain. In this study, we present such empirical evidence from experiments done within the domain of critical infrastructure. Eleven professional CS operators from the power sector participated in a realistic simulated network-related incident response task. SA, experience, and performance were scored for each participant. SA was measured using the Situation Awareness Global Assessment Technique (SAGAT). Statistically significant results confirmed three hypotheses: Higher SA was correlated with higher performance, and longer experience as an operator was correlated with higher performance. Additionally, higher SA is predictive of higher performance independently of longer experience. Accordingly, initial empirical evidence supporting the conjecture that cyber-SA is positively associated with performance now exists. Implications include that further CS research aimed at tool development and operator training should use recognized SA measurements as demonstrated in this study. This study thus contributes to bridging the existing knowledge gap of cyber-SA.
Ofte et al. (Sun,) studied this question.
Synapse has enriched 5 closely related papers on similar clinical questions. Consider them for comparative context: