{"id":"https://openalex.org/W7225319250","doi":"https://doi.org/10.1108/ics-06-2026-0410","title":"Workforce knowledge and operational skills in cyber threat intelligence","display_name":"Workforce knowledge and operational skills in cyber threat intelligence","publication_year":2026,"publication_date":"2026-11-05","ids":{"openalex":"https://openalex.org/W7225319250","doi":"https://doi.org/10.1108/ics-06-2026-0410"},"language":"en","primary_location":{"id":"doi:10.1108/ics-06-2026-0410","doi":"https://doi.org/10.1108/ics-06-2026-0410","is_oa":true,"landing_page_url":"https://doi.org/10.1108/ics-06-2026-0410","pdf_url":"https://www.emerald.com/ics/article-pdf/doi/10.1108/ICS-06-2026-0410/11954374/ics-06-2026-0410en.pdf","source":{"id":"https://openalex.org/S4210195545","display_name":"Information and Computer Security","issn_l":"2056-4961","issn":["2056-4961","2056-497X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["abdc-b","anvur-scientific","ccf-c","cwts-core","dongbi-c","fnege-4","jufo-1","norway-1","poland-40","russia-white-list-2"],"host_organization":"https://openalex.org/P4310319811","host_organization_name":"Emerald Publishing Limited","host_organization_lineage":["https://openalex.org/P4310319811"],"host_organization_lineage_names":["Emerald Publishing Limited"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Information & Computer Security","raw_type":"journal-article"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://www.emerald.com/ics/article-pdf/doi/10.1108/ICS-06-2026-0410/11954374/ics-06-2026-0410en.pdf","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5024094296","display_name":"Patrick Shirazi","orcid":"https://orcid.org/0009-0008-9916-7439","observed_orcids":["https://orcid.org/0009-0008-9916-7439"]},"institutions":[{"id":"https://openalex.org/I205158640","display_name":"University of Sk\u00f6vde","ror":"https://ror.org/051mrsz47","country_code":"SE","type":"education","lineage":["https://openalex.org/I205158640"]}],"countries":["SE"],"is_corresponding":true,"raw_author_name":"Patrick Shirazi","raw_affiliation_strings":["University of Sk\u00f6vde School of Informatics, , Sk\u00f6vde,"],"raw_orcid":"https://orcid.org/0009-0008-9916-7439","affiliations":[{"raw_affiliation_string":"University of Sk\u00f6vde School of Informatics, , Sk\u00f6vde,","institution_ids":["https://openalex.org/I205158640"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5049007692","display_name":"Ali Mohammad Padyab","orcid":"https://orcid.org/0000-0002-5286-4850","observed_orcids":["https://orcid.org/0000-0002-5286-4850"]},"institutions":[{"id":"https://openalex.org/I205158640","display_name":"University of Sk\u00f6vde","ror":"https://ror.org/051mrsz47","country_code":"SE","type":"education","lineage":["https://openalex.org/I205158640"]}],"countries":["SE"],"is_corresponding":false,"raw_author_name":"Ali Padyab","raw_affiliation_strings":["University of Sk\u00f6vde School of Informatics, , Sk\u00f6vde,"],"raw_orcid":"https://orcid.org/0000-0002-5286-4850","affiliations":[{"raw_affiliation_string":"University of Sk\u00f6vde School of Informatics, , Sk\u00f6vde,","institution_ids":["https://openalex.org/I205158640"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5054567134","display_name":"Robayet Nasim","orcid":"https://orcid.org/0000-0002-6221-3875","observed_orcids":["https://orcid.org/0000-0002-6221-3875"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Robayet Nasim","raw_affiliation_strings":["Swedbank Enterprise Architecture, , Stockholm,"],"raw_orcid":"https://orcid.org/0000-0002-6221-3875","affiliations":[{"raw_affiliation_string":"Swedbank Enterprise Architecture, , Stockholm,","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5024094296"],"corresponding_institution_ids":["https://openalex.org/I205158640"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.0,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"23"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9154999852180481,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9154999852180481,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12572","display_name":"Intelligence, Security, War Strategy","score":0.0560000017285347,"subfield":{"id":"https://openalex.org/subfields/3320","display_name":"Political Science and International Relations"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T12221","display_name":"Cybersecurity and Cyber Warfare Studies","score":0.007899999618530273,"subfield":{"id":"https://openalex.org/subfields/3320","display_name":"Political Science and International Relations"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/cyber-threat-intelligence","display_name":"cyber threat intelligence","score":1.0},{"id":"https://openalex.org/keywords/practitioner-competencies","display_name":"practitioner skills","score":0.6850000023841858},{"id":"https://openalex.org/keywords/operational-skills","display_name":"operational skills","score":0.9779999852180481},{"id":"https://openalex.org/keywords/intelligence-tradecraft","display_name":"intelligence tradecraft","score":0.8510000109672546},{"id":"https://openalex.org/keywords/situational-awareness","display_name":"situational awareness","score":0.9890000224113464},{"id":"https://openalex.org/keywords/cybersecurity-workforce","display_name":"cybersecurity workforce","score":0.3490000069141388},{"id":"https://openalex.org/keywords/recruitment-and-training","display_name":"recruitment and training","score":0.574999988079071}],"concepts":[{"id":"https://openalex.org/C56739046","wikidata":"https://www.wikidata.org/wiki/Q192060","display_name":"Knowledge management","level":1,"score":0.6324999928474426},{"id":"https://openalex.org/C2778139618","wikidata":"https://www.wikidata.org/wiki/Q13440398","display_name":"Workforce","level":2,"score":0.5613999962806702},{"id":"https://openalex.org/C517642484","wikidata":"https://www.wikidata.org/wiki/Q2388514","display_name":"Intelligence analysis","level":2,"score":0.5485000014305115},{"id":"https://openalex.org/C145804949","wikidata":"https://www.wikidata.org/wiki/Q478123","display_name":"Situation awareness","level":2,"score":0.5410000085830688},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.4812999963760376},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.453000009059906},{"id":"https://openalex.org/C2779968149","wikidata":"https://www.wikidata.org/wiki/Q8034851","display_name":"Workforce development","level":3,"score":0.4300999939441681},{"id":"https://openalex.org/C164850336","wikidata":"https://www.wikidata.org/wiki/Q3685487","display_name":"Interpersonal communication","level":2,"score":0.4180000126361847},{"id":"https://openalex.org/C105002631","wikidata":"https://www.wikidata.org/wiki/Q4833645","display_name":"Subject-matter expert","level":3,"score":0.4099999964237213},{"id":"https://openalex.org/C2767350","wikidata":"https://www.wikidata.org/wiki/Q6662173","display_name":"Business intelligence","level":2,"score":0.3431999981403351},{"id":"https://openalex.org/C43075056","wikidata":"https://www.wikidata.org/wiki/Q15910354","display_name":"Soft skills","level":2,"score":0.34130001068115234},{"id":"https://openalex.org/C2779530757","wikidata":"https://www.wikidata.org/wiki/Q1207505","display_name":"Quality (philosophy)","level":2,"score":0.3409000039100647},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.3215000033378601},{"id":"https://openalex.org/C174107131","wikidata":"https://www.wikidata.org/wiki/Q191591","display_name":"Emotional intelligence","level":2,"score":0.3174999952316284},{"id":"https://openalex.org/C9114305","wikidata":"https://www.wikidata.org/wiki/Q1428317","display_name":"Situational ethics","level":2,"score":0.3149000108242035},{"id":"https://openalex.org/C85973986","wikidata":"https://www.wikidata.org/wiki/Q1091731","display_name":"Exploratory research","level":2,"score":0.29660001397132874},{"id":"https://openalex.org/C99712631","wikidata":"https://www.wikidata.org/wiki/Q1160650","display_name":"Industrial espionage","level":2,"score":0.2904999852180481},{"id":"https://openalex.org/C49504249","wikidata":"https://www.wikidata.org/wiki/Q4168000","display_name":"Military intelligence","level":2,"score":0.29010000824928284},{"id":"https://openalex.org/C164065428","wikidata":"https://www.wikidata.org/wiki/Q1201929","display_name":"Core competency","level":2,"score":0.2867000102996826},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.28619998693466187},{"id":"https://openalex.org/C155663085","wikidata":"https://www.wikidata.org/wiki/Q1056396","display_name":"Workforce planning","level":3,"score":0.2854999899864197},{"id":"https://openalex.org/C75630572","wikidata":"https://www.wikidata.org/wiki/Q538904","display_name":"Applied psychology","level":1,"score":0.2838999927043915},{"id":"https://openalex.org/C165696491","wikidata":"https://www.wikidata.org/wiki/Q4751161","display_name":"Analytical skill","level":2,"score":0.2750999927520752},{"id":"https://openalex.org/C74196892","wikidata":"https://www.wikidata.org/wiki/Q7781188","display_name":"Thematic analysis","level":3,"score":0.26829999685287476},{"id":"https://openalex.org/C190248442","wikidata":"https://www.wikidata.org/wiki/Q839486","display_name":"Qualitative research","level":2,"score":0.2590999901294708},{"id":"https://openalex.org/C139807058","wikidata":"https://www.wikidata.org/wiki/Q352374","display_name":"Adaptation (eye)","level":2,"score":0.25690001249313354},{"id":"https://openalex.org/C509550671","wikidata":"https://www.wikidata.org/wiki/Q126945","display_name":"Medical education","level":1,"score":0.25619998574256897},{"id":"https://openalex.org/C2780571617","wikidata":"https://www.wikidata.org/wiki/Q2072185","display_name":"Workforce management","level":3,"score":0.2554999887943268},{"id":"https://openalex.org/C2779585090","wikidata":"https://www.wikidata.org/wiki/Q3457762","display_name":"Resilience (materials science)","level":2,"score":0.25130000710487366},{"id":"https://openalex.org/C207685749","wikidata":"https://www.wikidata.org/wiki/Q2088941","display_name":"Domain knowledge","level":2,"score":0.25119999051094055}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1108/ics-06-2026-0410","doi":"https://doi.org/10.1108/ics-06-2026-0410","is_oa":true,"landing_page_url":"https://doi.org/10.1108/ics-06-2026-0410","pdf_url":"https://www.emerald.com/ics/article-pdf/doi/10.1108/ICS-06-2026-0410/11954374/ics-06-2026-0410en.pdf","source":{"id":"https://openalex.org/S4210195545","display_name":"Information and Computer Security","issn_l":"2056-4961","issn":["2056-4961","2056-497X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["abdc-b","anvur-scientific","ccf-c","cwts-core","dongbi-c","fnege-4","jufo-1","norway-1","poland-40","russia-white-list-2"],"host_organization":"https://openalex.org/P4310319811","host_organization_name":"Emerald Publishing Limited","host_organization_lineage":["https://openalex.org/P4310319811"],"host_organization_lineage_names":["Emerald Publishing Limited"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Information & Computer Security","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1108/ics-06-2026-0410","doi":"https://doi.org/10.1108/ics-06-2026-0410","is_oa":true,"landing_page_url":"https://doi.org/10.1108/ics-06-2026-0410","pdf_url":"https://www.emerald.com/ics/article-pdf/doi/10.1108/ICS-06-2026-0410/11954374/ics-06-2026-0410en.pdf","source":{"id":"https://openalex.org/S4210195545","display_name":"Information and Computer Security","issn_l":"2056-4961","issn":["2056-4961","2056-497X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["abdc-b","anvur-scientific","ccf-c","cwts-core","dongbi-c","fnege-4","jufo-1","norway-1","poland-40","russia-white-list-2"],"host_organization":"https://openalex.org/P4310319811","host_organization_name":"Emerald Publishing Limited","host_organization_lineage":["https://openalex.org/P4310319811"],"host_organization_lineage_names":["Emerald Publishing Limited"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Information & Computer Security","raw_type":"journal-article"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7225319250.pdf","grobid_xml":"https://content.openalex.org/works/W7225319250.grobid-xml"},"referenced_works_count":39,"referenced_works":["https://openalex.org/W1494380913","https://openalex.org/W1580022002","https://openalex.org/W1589382802","https://openalex.org/W2137125422","https://openalex.org/W2146948159","https://openalex.org/W2460117687","https://openalex.org/W2533908554","https://openalex.org/W2771173811","https://openalex.org/W2783245716","https://openalex.org/W2800740927","https://openalex.org/W2899359333","https://openalex.org/W2945437145","https://openalex.org/W2953684237","https://openalex.org/W2964522977","https://openalex.org/W2967084391","https://openalex.org/W2989918477","https://openalex.org/W3006161904","https://openalex.org/W3025822495","https://openalex.org/W3041263875","https://openalex.org/W3042306246","https://openalex.org/W3043379545","https://openalex.org/W3084623238","https://openalex.org/W3117718055","https://openalex.org/W3139231484","https://openalex.org/W3166620705","https://openalex.org/W3217150391","https://openalex.org/W4241642683","https://openalex.org/W4285018249","https://openalex.org/W4311725228","https://openalex.org/W4366319386","https://openalex.org/W4381137026","https://openalex.org/W4384153669","https://openalex.org/W4393257072","https://openalex.org/W4401798873","https://openalex.org/W4406277953","https://openalex.org/W4407246124","https://openalex.org/W4409535480","https://openalex.org/W4413862555","https://openalex.org/W4415834549"],"related_works":["https://openalex.org/W7082988428","https://openalex.org/W3006161904","https://openalex.org/W4381137026","https://openalex.org/W4415834549","https://openalex.org/W2463633928","https://openalex.org/W7166416755","https://openalex.org/W7163220320","https://openalex.org/W7163168527","https://openalex.org/W4281697220","https://openalex.org/W4394996003"],"abstract_inverted_index":{"Purpose":[0],"This":[1],"study":[2,165],"aims":[3],"to":[4,65,157,179],"explore":[5],"the":[6,43],"knowledge":[7,93,176],"and":[8,28,60,63,69,96,105,116,137,143,153,160,173,177],"skills":[9,111,178],"practitioners":[10,27],"consider":[11],"important":[12],"for":[13,47,56,83,149],"cyber":[14],"threat":[15],"intelligence":[16,100,193],"(CTI)":[17],"practice":[18],"in":[19],"organizations.":[20],"Design/methodology/approach":[21],"Semi-structured":[22],"interviews":[23],"with":[24,78,126],"14":[25],"CTI":[26,168],"cybersecurity":[29,95],"leaders":[30],"were":[31,54],"analyzed":[32],"using":[33],"deductive":[34],"qualitative":[35],"analysis.":[36],"Socio-technical":[37],"systems":[38],"theory":[39],"informed":[40],"interpretation,":[41],"while":[42],"NICE":[44],"Workforce":[45],"Framework":[46],"Cybersecurity":[48],"supplied":[49],"organizing":[50],"categories.":[51],"Interview":[52],"excerpts":[53],"coded":[55],"knowledge,":[57,99,102],"skills,":[58],"tasks":[59],"work":[61],"roles":[62],"tagged":[64],"collection,":[66],"processing,":[67],"analysis":[68,90],"dissemination.":[70],"The":[71,89,141,164],"mapping":[72,144,186],"was":[73],"refined":[74],"through":[75,170],"member":[76],"checking":[77],"four":[79,92,130],"original":[80],"participants":[81],"selected":[82],"complementary":[84],"areas":[85],"of":[86,190],"expertise.":[87],"Findings":[88],"identifies":[91],"areas:":[94],"IT":[97],"domain":[98],"tradecraft":[101],"situational":[103],"awareness":[104],"business":[106],"context":[107],"knowledge.":[108],"Eleven":[109],"operational":[110],"encompass":[112],"technical,":[113],"analytical,":[114],"communicative":[115],"interpersonal":[117],"capabilities.":[118],"Reported":[119],"competency":[120],"associations":[121],"vary":[122],"across":[123],"lifecycle":[124,180],"activities,":[125],"some":[127],"spanning":[128],"all":[129],"stages.":[131],"Two":[132],"practitioner":[133,171],"profiles":[134],"emerged:":[135],"technical-operational":[136],"intelligence-analytical.":[138],"Practical":[139],"implications":[140],"competencies":[142,169],"provide":[145],"a":[146],"starting":[147],"point":[148],"recruitment,":[150],"training,":[151],"mentoring":[152],"team":[154],"design,":[155],"subject":[156],"contextual":[158],"adaptation":[159],"further":[161],"evaluation.":[162],"Originality/value":[163],"contextualizes":[166],"established":[167],"accounts":[172],"connects":[174],"reported":[175],"activities.":[181],"It":[182],"offers":[183],"an":[184],"exploratory":[185],"rather":[187],"than":[188],"evidence":[189],"effects":[191],"on":[192],"quality":[194],"or":[195],"organizational":[196],"performance.":[197]},"counts_by_year":[],"updated_date":"2026-11-07T11:25:07.637180","created_date":"2026-11-06T00:00:00"}