Future Forums are multiphase user centered design workshops, with the early phases
aiming to initiate discussions, that then leads to the co-design of game elements centered …

It takes a certain type of person to properly promote and manage security issues. But can we
identify specific links between security behaviours and personality types? Trevor Gabriel …

Developers turn to Stack Overflow and other on-line sources to find solutions to security
problems, but little is known about how they engage with and guide one another in these …

In the information security field, the human factor is the vulnerability considered to be the
most unpredictable one. In addition, the human factor is characterized by being the most …

A significant volume of security breaches occur as a result of the human aspects and it is
consequently important for these to be given attention alongside technical aspects. Many …

In response to the increased “cyber” threats to business, the UK and US Governments are
taking steps to develop the training and professional identity of information security …

Organisational information security policy contents are disseminated by awareness and
training drives. Its success is usually judged based on immediate post-training self-reports …

If it is to be truly successful, security requires engagement right across an organisation. It
needs to be embedded in everyday operations and championed from both the top of an …

Security policy-makers (influencers) in an organization set security policies that embody
intended behaviours for employees (as decision-makers) to follow. Decision-makers then …

This paper describes materials developed to engage professional developers in discussions
about security. First, the work is framed in the context of ethnographic studies of software …