27th Parliamentary-Intelligence Security Forum – Cybersecurity: The Human Element
Dr. Paul J. Maurer discussed the critical role of ethics and the human element in cybersecurity. He emphasized that cybersecurity challenges are primarily human problems, not purely technical ones, and that the solution depends on cultivating people of character and ethical judgment.
Key points include:
- The Code of Honor: Dr. Maurer and co-author Ed Scotus created a book and curriculum called The Code of Honor, designed to guide ethical decision-making in high-stakes cybersecurity environments.
- Eight principles of the Code:
- Treat all people with dignity and respect.
- Seek the best interest of others.
- Recognize and communicate mistakes; exercise patience with errors.
- Be honest, trustworthy, and above reproach.
- Work collaboratively; avoid being a lone wolf.
- Exercise patience, wisdom, and self-control.
- Prevent theft in all forms.
- Protect and respect the privacy of others.
- Practical application: Real-world scenarios like ransomware attacks and IT audit discrepancies illustrate how these principles guide ethical decision-making.
- NSA involvement: The National Security Agency has incorporated ethics as a required component for its nearly 500 designated Centers of Academic Excellence in cybersecurity education.
- Global relevance: With cybercrime projected to exceed $10 trillion globally, Dr. Maurer advocates for a widely accepted international ethical framework for cybersecurity professionals.
- Workforce impact: The US currently has about 1.2 million cybersecurity professionals with roughly 550,000 unfilled positions; ethical training is critical as the field rapidly expands globally.
Dr. Maurer’s core message: technology alone cannot secure cyberspace ethical, skilled humans are essential, and structured guidance like the Code of Honor can help develop a responsible, competent cybersecurity workforce worldwide.
