In the aftermath of cybersecurity incidents within organizations, explanations of their causes
often revolve around isolated technical or human events such as an Advanced Persistent …

Purpose Adverse cyber events, like death and taxes, have become inevitable. They are an
increasingly common feature of organisational life. Their aftermaths are a critical and under …

Purpose The purpose of this study was to investigate the role of grace in the aftermaths of
adverse cybersecurity incidents. Adverse incidents are an inescapable fact of life in …

Employees play a pivotal role for organizational cybersecurity, making understanding the
human factor in the context of cybersecurity a critical necessity. While much is known about …

Security awareness is big business–virtually every organization in the Western world
provides some form of awareness or training, mostly bought from external vendors …

Organizations rely on phishing interventions to enhance employees' vigilance and safe
responses to phishing emails that bypass technical solutions. While various resources are …

Over the past decade, researchers investigating IT security from a socio-technical
perspective have identified the importance of trust and collaboration between different …

Small-and medium-sized enterprises (SMEs) are an essential part of the global economy
and paramount to local communities and employment markets. They are also considered to …

Despite the relevance of emotions in explaining human behavior, emotions have
traditionally been neglected in models explaining cybersecurity behavior. In recent years …

Cybersecurity attacks offer a pertinent context within which to examine the currently under-
explored dynamics of trust and distrust and their consequences for organisations and their …