The Interface Between Technology and people in cybersecurity : technological solutions supporting humans in organizational protection

Abstract

The thesis aims to explore the synergy between technology and human and the interaction between them in order to enhance cybersecurity within organizations. Commissioned by the Information Technology (IT) department of one of the leading construction companies in Finland, the study focuses on user-centered security, behavior analytics, real-time threat management and technology-supported training with the goal to minimize vulnerabilities and improve organizational overall security posture.

The thesis is made as a development task and it aims to provide ways to gain benefits on interfaces that facilitate detection automation, implementing behavior analytics powered by artificial intelligence and machine learning and how to deploy comprehensive training modules to prepare employees against cyber threats. These goals aim to reduce the potential for human errors in daily security processes and improve the efficiency of threat detection and response.

The theoretical framework is built upon a review of academic literature, cybersecurity standards, industry reports and case studies from reputable sources such as the European Union Agency for Cybersecurity (ENISA). This foundation supports the exploration of user-centric security design principles, behavioral analytics methodologies, automation capabilities and effective training strategies. The thesis employs a qualitative approach for analyses and data collection involves interviews with the client's cybersecurity personnel. With these methodologies a well-rounded understanding of real life challenges that organizations usually face will be archived.

The key findings of the thesis show that AI-driven behavior analytics can significantly improve detection capabilities by identifying anomalies from normal user behavior patterns. Automation tools can effectively reduce the manual workload that is associated with maintaining cybersecurity defenses, therefore allowing for more efficient allocation of resources. Real-time threat management systems can provide important insights through data analytics for the information that is used by human when making rapid decisions during threat scenarios. Interactive training exercises are proven to be in a key role when increasing employee awareness and preparedness against emerging cyber threats. The analysis of the results obtained by this thesis indicate, that with integrating advanced technologies alongside with human factors can improve organizational cybersecurity significantly by enabling rapid threat detection and automated proactive response mechanisms. The need for careful consideration of privacy concerns, legal constraints and ethical implications associated with surveillance technologies is also highlighted in the findings. The thesis concludes with recommendations on how to balance the benefits of different technological innovations and also introduces the potential risks alongside it. It suggests adopting adaptive learning systems that evolve alongside emerging threats and emphasizes the importance of continuous user education as a vital component in battling social engineering attacks.