In larger organisations, the security controls and policies that protect employees are typically
managed by a Chief Information Security Officer (CISO). In research, industry, and policy …

In larger organisations, the security controls and policies that protect employees are typically
managed by a Chief Information Security Officer (CISO). In research, industry, and policy …

This position paper is a reflective look at the state of Human-Centred Security & Privacy
(HCSP) research and the paradigms that have informed and driven the research. It is …

Humans are and have been the weakest link in the cybersecurity chain (eg,[1–3]). Not all
systems are adequately protected and even for those that are, individuals can still fall prey to …

Cyber crime is rising at an unprecedented rate. Organisations are spending more than ever
combating the human element through training and other interventions, such as simulated …

Most organisations are using online security awareness training and simulated phishing
attacks to encourage their employees to behave securely. Buying off-the-shelf training …

It is often observed that addressing security can be as much about people as it is
technology. One of the key aspects here is establishing the correct mindset, and ensuring …

I like the book, but hate the subtitle. Most of the security industry desperately wants you to
know the truth. I don't think the author really believes the subtitle either—surely the security …

Despite being considered a fundamental issue in the design, use, and appropriation of
digital technologies, IT security has found but little attention in CSCW so far. Approaches in …

Insider security breaches in organizations have been identified as a pressing problem for
academics and practitioners. The literature generally addresses this problem by focusing on …