Chapter 32 — Human factors and cyber policy: interdisciplinary interfaces

Chapter 32 — Human factors and cyber policy: interdisciplinary interfaces

Lesson map

Lesson 32 published. Map, example, EX094.

flowchart TD
  N0["Learning outcomes"]
  N1["32.1 Several perspectives"]
  N2["32.2 Translating"]
  N3["32.3 Shared understanding"]
  N4["Synthesis"]
  N0 --> N1 --> N2 --> N3 --> N4
  N4 --> EX["Worked example"]
  EX --> Q["Exercise EX094"]

Logical drawing

flowchart LR
  N0["Learning outcomes"]
  N1["32.1 Several perspectives"]
  N2["32.2 Translating"]
  N3["32.3 Shared understanding"]
  N4["Synthesis"]
  N0 --> N1 --> N2 --> N3 --> N4 --> Q["EX094"]

[Learning outcomes]
    |
    v
[32.1 Several perspectives]
    |
    v
[32.2 Translating]
    |
    v
[32.3 Shared understanding]
    |
    v
[Synthesis]
    |
    v
[Worked example] --> [Exercise EX094]

Learning outcomes

You will (1) work with law, psychology and management perspectives; (2) translate between disciplines; (3) build shared understanding for decisions.

32.1 Several perspectives

Security decisions at Ashcombe involve several disciplines. Data protection law sets duties for member data. Psychology explains why staff respond to pressure as they do. Management decides budgets and priorities. IT implements controls. Nadia learns that each discipline uses its own language: lawyers speak of lawful bases and duties, psychologists of norms and cognitive load, managers of costs and outcomes. Effective human factors work involves translating between these languages so that decisions draw on all relevant knowledge rather than one view.

32.2 Translating

Nadia prepares a one-page brief on the phone impersonation risk for each audience. For the privacy officer, she frames the no-disclosure rule as protecting member data and meeting legal duties. For managers, she frames it as reducing risk at almost no cost. For staff, she frames it as protecting them from pressure: they never have to judge whether a caller is genuine. The same rule, explained in each discipline's terms, gains support more easily than one explanation would. Each brief fits on one page.

32.3 Shared understanding

Nadia organises a short meeting where the privacy officer, a manager, an IT officer and a staff representative discuss the reporting programme together. Each explains their concerns. The privacy officer worries about logs; the manager about cost; IT about workload; the representative about blame. Hearing each other, they agree on a minimised log, a modest budget, templated replies and a no-blame statement. Nadia learns that interdisciplinary work is often less about expertise and more about creating spaces where people can understand each other.

Worked example

Nadia translates the no-disclosure rule for legal, management and staff audiences and convenes a meeting that reaches shared agreements.

Synthetic case. The meeting is synthetic.

Errors and limits

Translation can oversimplify. Meetings can be dominated by senior voices.

Exercises

• EX094 — Staff framing. How was the rule framed for staff? Rubric: 3 = protection from pressure to judge callers;; 2 = relief;; 1 = vague;; 0 = none.
• EX095 — Representative concern. What did the staff representative worry about? Rubric: 3 = being blamed for mistakes;; 2 = blame, without saying for what;; 1 = cost;; 0 = none.
• EX096 — Meeting outcome. What did the meeting agree? Rubric: 3 = minimised log, modest budget, templates and no-blame statement;; 2 = four;; 1 = vague;; 0 = none.

Synthesis

Human factors work translates between disciplines and creates shared understanding.

Continue studying — chapter 32 of 40

← Chapter 31 (draft) · Course chapter index · Chapter 33 (draft) →