Leveraging Social Learning for Improved Cybersecurity Maturity: A Case Study Using the NIST Framework

This research shows that social learning can be used to increase an organization's cybersecurity maturity level. Using a literature study and case study approach. Literature studies are used to identify social learning's key success factors (KSF) and challenges in general. Then, the case study was performed in the context of assessing the maturity level of information security using the NIST Cybersecurity framework at ABC Software House, a small-scale software development company in Indonesia. Assessment activities are performed through FGDs which then also identify the most relevant social learning’ KSF to increase the organization's information security maturity level. Next, referring to the selected KSF, a process of identifying and mapping social learning’ challenges was carried out. The integration of social learning can help organizations gain better focus and understanding in nontechnical contexts to increase their maturity level. This research highlights that integrating social learning with the NIST cybersecurity framework can provide organizations with better focus and perspective for formulating non-technical solutions. This study also enriches the existing literature on social learning in cybersecurity and offers practical insights for organizations looking to improve their cybersecurity resilience.