Structured Field Coding and its Applications to National Risk and Cybersecurity Assessments
Authors:
- William H. DuttonWDWilliam H. Dutton
- Ruth ShillairRSRuth Shillair
- Louise AxonLALouise Axon
- Carolin WeisserCWCarolin Weisser
- 31 December 2023
- journal article
- research article
- Published by NASK National Research Institute in Applied Cybersecurity & Internet Governance
- Vol. 2 (1) , 1-24
Abstract
Data on cybersecurity capacity building efforts is critical to improving cybersecurity at national levels. Policy should be informed not only by measures that allow internal assessment of strengths and weaknesses that enable cross-national comparisons. The International Telecommunications Union (ITU) and its Global Cybersecurity Index (GCI) has used a standardized survey that has been adapted and used in multiple national assessments by the Global Cyber Security Capacity Centre. This adaptation includes an addition of open field coding assessments that rely heavily on trained experts and interactions with national focus groups. These assessments are checked using multiple coders to increase reliability and reduce bias. This process of ‘structured field coding’ (SFC) is an approach to collecting and coding observations based on multiple methods, quantitative as well as qualitative. This approach differs from open field coding in providing a set structure for coding observations from the field based on established frameworks for assessment. The SFC process is explained along with a discussion of the origin and the advantages and limitations of this methodological approach. It can be used in a variety of studies but is presented here as a means to integrate data for cross-national comparative analyses. Its application to improving the reliability and validity of data collection across a region, such as the EU, would help stakeholders evaluate where they should invest resources to improve their cybersecurity capacity.Keywords
This publication has 13 references indexed in Scilit:
- Cybersecurity education, awareness raising, and training initiatives: National level evidence-based results, challenges, and promiseComputers & Security, 2022
- Understanding cybersecurity capacity building and its relationship to norms and confidence building measuresJournal of Cyber Policy, 2021
- The social and cultural shaping of cybersecurity capacity building: a comparative study of nations and regionsPersonal and Ubiquitous Computing, 2021
- Cybersecurity capacity-building: cross-national benefits and international dividesJournal of Cyber Policy, 2021
- The Necessity and Pitfall of Cybersecurity Capacity Building for Norm Development in CyberspaceGlobal Society, 2019
- The Cybersecurity Strategy of the Visegrad Group CountriesPolitics in Central Europe, 2018
- Information Security Maturity Model for Nist Cyber Security Framework2017
- The Worldwide Governance Indicators: Methodology and Analytical IssuesHague Journal on the Rule of Law, 2011
- Grounded Theory Research: Procedures, Canons and Evaluative CriteriaZeitschrift Fur Soziologie, 1990
- A future cities survey research design for policy analysisSocio-Economic Planning Sciences, 1976