SaTC: CORE: Medium: Knowledge Work and Coordination to Improve O&M and IT Collaboration to Keep Our Buildings Smart AND Secure

政府组织、企业和大学越来越多地将物联网（IoT）设备（如房间占用传感器）添加到其建筑物中。由于这些传感器连接到互联网并与建筑技术（如供暖和照明）联网，攻击者可以关闭建筑物或窃取敏感信息。虽然存在技术解决方案，但这些解决方案的实施受到组织的信息技术（IT）人员和建筑物的运营和管理（O M）人员的挑战的阻碍，当他们未能密切合作并分享他们关于计算机安全和建筑物如何运行的知识时。这些困难来自于不同的工作方式和对技术如何工作的不同观点。该项目通过研究两个关键领域来应对这些挑战：（1）运营管理和IT当前如何共享知识和技能并共同努力提高物联网安全性，以及（2）公共政策和组织自身有关隐私和安全的规则如何影响IT和运营管理的合作方式。本研究的结果将产生关于IT和O M专业人员如何更好地合作以提高我们国家建筑物的安全性的知识，并提供公共政策如何影响专业网络安全合作的见解。本项目将确定法律的和组织的政策和程序如何与日常工作实践相互作用，以支持或限制O M和IT人员如何分享他们的专业知识并协调他们的工作，以合作解决物联网安全问题。该研究团队将进行观察、访谈和文件分析，首先观察和访谈美国三所大学的IT和O M工作人员在协作网络安全方面的工作，并分析与物联网网络安全相关的大学文件。该研究团队将同时与来自美国各地的IT和O M安全专家进行访谈，并创建一组大学O M和IT物联网安全工作的比较案例研究。这项研究之后将进行最后一组专家访谈。研究团队将确定支持IT和O M协作的关键方法，并开发一个理论模型，以提供组织、政策和实践如何相互作用和影响协作的整体视图，以保持物联网的安全。这项研究还将提供清晰的例子，说明当今组织中使用的政策、程序和实践是如何支持或阻碍IT和O M专业人员之间的合作的。该奖项反映了NSF的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。

Government organizations, businesses, and universities are increasingly adding Internet of Things (IoT) devices, such as room occupancy sensors, into their buildings. As these sensors are connected to the internet and networked to building technology (such as heating and lights), an attacker could shut down a building or steal sensitive information. While technical solutions exist, implementation of these solutions are impeded by the challenges that an organization's information technology (IT) staff and a building's operations and management (O&M) staff have when they fail to work closely together and share their knowledge about computer security and how buildings operate. These difficulties arise from different ways of working and different points of view about how technology works. This project addresses these challenges through studying two critical areas: (1) how O&M and IT currently share their knowledge and skills and work together to improve IoT security and (2) how public policies and an organization's own rules regarding privacy and security impact how IT and O&M collaborate. The results of this study will generate knowledge around how IT and O&M professionals can work better together to improve the security of our nation's buildings and offer insights into how public policy may affect professional cybersecurity collaboration.This project will identify how legal and organizational policies and procedures interact with daily work practices to either support or limit how O&M and IT staff share their expertise and coordinate their work to collaborate on IoT security issues. The research team will conduct observations, interviews, and document analyses, first observing and interviewing IT and O&M staff on collaborative cybersecurity efforts in three U.S. universities and analyzing university documents related to IoT cybersecurity. The research team will concurrently conduct interviews with IT and O&M security experts from across the U.S. as well as create a set of comparative case studies of university O&M and IT IoT security efforts. This research will be followed by a final set of expert interviews. The research team will identify key methods that support IT and O&M collaboration and develop a theoretical model to provide a holistic view of how organization, policy, and practice interact and affect collaboration intended to keep IoT safe and secure. This research will also provide clear examples of how policies, procedures, and practices used in organizations today are supporting or impeding collaboration between IT and O&M professionals.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.