There are seven principles of science: Relativism, Objectivity, Parsimony, Empiricism, Ethical Neutrality, Determinism, and Skepticism. Each principle has its level of depth that can be explored and discussed for ages. However, these principles also relate to the realm of cybersecurity. Within this essay, definitions will be given for each principle with an example of how they correlate with cybersecurity.

Relativism is a complex principle, but it essentially means that all things are related to one another in terms of their relativity. There are no coincidences, and every point of view, no matter how trivial or knowledgeable, is meaningful. An example of this in cybersecurity would be how the treatment of a company’s employees relates to its vulnerability to a cyberattack.

Objectivity means the absolute point of view of things. Removed from opinions, subjectivity, and external factors, only the facts that are necessary to advance science are allowed. An example of this in cybersecurity would be researching information based on facts and truth that have been tested and proven to be correct.

Parsimony is the idea of keeping explanations simple. A form of parsimony that one might have heard of before would be Occam’s Razor, an idea that means that the simplest answer to a problem is the best answer; all other complicated answers shouldn’t be considered. Although human emotions cannot easily be rationalized with a simple answer, it doesn’t mean that it is impossible. An example of this in cybersecurity would be identifying the simplest solutions and answers to a cyberattack, as well as understanding why a hacker might commit such an attack.

Empiricism is the idea that subject matters can only be studied if they appeal to our five senses and our overall experiences. Experiences are one of the dominant ways people learn, and the same thing can be said for science. An example of this in cybersecurity would be relying on true and tested ideas and not on people’s guesses for learning more about cybersecurity.

Ethical Neutrality is the belief that all practices and tests should have a moral standard. An example of this in cybersecurity would be conducting tests that are humane and don’t invade a specific group’s privacy and safety.

Determinism, in summary, would be the cause and effect of things and how our actions and choices stem from our previous actions and choices. An example of this in cybersecurity would be understanding a hacker’s motive, environment, and history, which led them to cause a cyberattack to begin with.

Lastly, Skepticism is the belief that one should always question all available information, for not all things are absolute. An example of this in cybersecurity would be questioning and testing the framework of a company’s cybersecurity program or questioning the legitimacy of a cyberattack investigation.