Information security and the cybernetic approach: a model for training information security specialists in the era of digitalization

Abstract

This study focuses on the training of information security specialists from the perspective of a cybernetic approach, taking into account the challenges posed by the rapid process of digital transformation. The analysis begins with the premise that information security cannot be viewed merely as a matter of following technical rules; rather, it requires systemic, adaptive, and multidisciplinary thinking, which is what makes the cybernetic approach relevant. Taking this idea into consideration, the paper proposes an innovative training model for information security specialists, comprising three types of skills (technical, analytical, and decision-making/ethical). Traditional training techniques will be used alongside cybernetic exercises and simulations, as well as case studies based on real-life incidents. Thus, it is concluded that there is a significant shortcoming in current educational programs in terms of artificially separating technical and strategic approaches. The conclusions will provide a number of suggestions for improving existing academic programs to better align with job requirements in the Republic of Moldova.