Developing work environments that foster the growth of individuals' cybersecurity skills[Développer des environnements de travail favorables à l’accroissement des compétences cyber des individus]

Cybersecurity is one of the significant challenges of modern industry, especially with the development of technology and the internet in recent years. Humans are often characterized by cybersecurity experts as the "weakest link" in the cybersecurity chain. This premise is based on the paradigm of "human error," which assumes that security breaches are primarily due to individual factors (cognitive biases). However, the literature has shown that work constraints (time pressure) and the nature of the environment also play a significant role in shaping individual behavior and cyber risks, challenging the paradigm of "human error." To address cyber risks, organizations tend to invest in technical solutions or implement policies aimed at controlling individuals. This paper proposes a systemic approach to cybersecurity with the aim of creating enabling environments that facilitate the development of individuals' capabilities in this field.