Cyber Crime and Cyber Terrorism

48
CHAPTER 5
User requirements for cyber-security investigations
wider ethical issues of security research and in relation to cyber investigations, the 
balance between public safety and the need for security interventions (
Iphofen, in 
print; Kavakli et al., 2005
).
Aspects of privacy and confidentiality underpin many of the ethical challenges of 
user requirements elicitation, where investigators must ensure that:
• End-users and stakeholders are comfortable with the type of information they 
are sharing and how the information might be used.
• End-users are not required to breach any agreements and obligations with their 
employers or associated organizations.
In many ways these ethical concerns are governed by Codes of Conduct that are 
regulated by professional bodies such as the British Psychological Society (BPS) 
but it is important that investigators clearly identify the purpose of an investigation 
and set clear and legitimate boundaries for intended usage and communication of 
collected data.
The macro-approach is in contrast to micro-ergonomics, which traditionally fo-
cuses on the interaction of a single user and their immediate technology use (
Reiman 
and Väyrynen, 2011
). This has often been a starting point for traditional human fac-
tors approaches; however by understanding macro-level issues, the complexity of 
socio-technical factors can be translated into micro-level factors for more detailed 
analysis (
Kleiner, 2006
). For example, 
Kraemer et al. (2009)
explored issues in secu-
rity screening and inspection of cargo and passengers by taking a macro-ergonomics 
approach. A five-factor framework was proposed that contributes to the “stress load” 
of frontline security workers in order to assess and predict individual performance 
as part of the overall security system (
Figure 5.2
). This was achieved by identifying 
the interactions between: organizational factors (e.g., training, management support, 
and shift structure), user characteristics (i.e., the human operator’s cognitive skills,