The distributed nature of cyber situation awareness

Abstract

We present here preliminary findings from our ongoing study of situation awareness in cybersecurity (cyber-SA). Analysis of data collected from the field has produced two preliminary findings. One, cyber-SA is distributed across individuals, technological agents, and functional domains. Two, an absence of effective boundary objects inhibit cross-boundary collaboration and reduce individual cyber-SA.