When I think of anything cybersecurity, I typically do not immediately think about any social sciences. I’ve been spending more of my free time practicing network penetration testing in an effort to assist guiding a few friends towards earning their OSCP, and it’s easy to have an almost straight-forward, almost completely technical approach to the challenge. Watching this video, however, is a good reminder that it’s not always about the computers.
The big stand out, early on, was exactly how much the legal realm interacts in the the world of digital forensics. It’s not enough to simply find evidence. Understanding how that evidence can be lawfully collected, preserved, and presented is critical. Without considering the legal and procedural aspects, even the most technically sound work can be rendered useless,or worse, inadmissible, in a real-world investigation. This really highlights the importance of taking a more interdisciplinary approach to cybersecurity. Technical skill is essential, but without an understanding of the legal, ethical, and social frameworks that surround it, that skill can only go so far by itself.