Exploring Cyber Security Policy Options in Australia

Mikolic-Torreira, Igor; Snyder, Don; Price, Michelle; Shlapak, David A.; Beaghley, Sina; Bishop, Megan; Harting, Sarah; Oberholtzer, Jenny; Pettyjohn, Stacie L.; Weinbaum, Cortney; Westerman, Emma

doi:10.7249/rr2008

Cited by 4 publications

(4 citation statements)

References 0 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Having reviewed the literature on shame, and the different stances taken with respect to its use in organizations, we now consider its use in cyber security. There are arguments both for [45,69,89,94,143] and against its use [107,114] in the cyber security domain.…”

Section: Shame In Cyber Security Research and Practicementioning

confidence: 99%

See 1 more Smart Citation

Shame in Cyber Security: Effective Behavior Modification Tool or Counterproductive Foil?

Renaud

Searle

Dupuis

2021

New Security Paradigms Workshop

View full text Add to dashboard Cite

Organizations often respond to cyber security breaches by blaming and shaming the employees who were involved. There is an intuitive natural justice to using such strategies in the belief that the need to avoid repeated shaming occurrences will encourage them to exercise more care. However, psychology highlights significant short-and long-term impacts and harmful consequences of felt shame. To explore and investigate this in the cyber domain, we asked those who had inadvertently triggered an adverse cyber security incident to tell us about their responses and to recount the emotions they experienced when this occurred. We also examined the impact of the organization's management of the incident on the "culprit's" future behaviors and attitudes. We discovered that those who had caused a cyber security incident often felt guilt and shame, and their employers' responses either exacerbated or ameliorated these negative emotions. In the case of the former, there were enduring unfavorable consequences, both in terms of employee well-being and damaged relationships. We conclude with a set of recommendations for employers, in terms of responding to adverse cyber security incidents. The aim is to ensure that negative emotions, such as shame, do not make the incident much more damaging than it needs to be. CCS CONCEPTS• Security and privacy → Social aspects of security and privacy; Usability in security and privacy; • Applied computing → Psychology; Sociology.

show abstract

Section: Shame In Cyber Security Research and Practicementioning

confidence: 99%

“…Advocating Blaming & Shaming: An Australian study [94] explored security policy options during a security exercise. They mention that some participants favored using a 'name and shame' tactic to respond to insecure behaviors.…”

Section: Shame In Cyber Security Research and Practicementioning

confidence: 99%

Shame in Cyber Security: Effective Behavior Modification Tool or Counterproductive Foil?

Renaud

Searle

Dupuis

2021

New Security Paradigms Workshop

View full text Add to dashboard Cite

show abstract

“…Compared to other countries discussed earlier, Australia is still lagging in imposing the legislation for the protection of IoT. In the past, the federal government has proposed the idea of a rating logo for Internet-connected devices which is named as "Cyber Kangaroo" [54] -assuring a basic level of quality for consumers.…”

Section: Australiamentioning

confidence: 99%

IoT Behavioral Monitoring via Network Traffic Analysis

Sivanathan

2020

Preprint

View full text Add to dashboard Cite

I graciously acknowledge and appreciate the collaboration with the teams at Cisco Systems and the Australian Communications Consumer Action Network (AC-CAN). Their involvement and the input provided at various stages of this work were inevitably productive. v I have been extremely fortunate to meet and interact with several talented, interesting, and fun fellow research colleagues, Mohammad Hossein, Ayyoob, Sharat, Iresha, Jawad, Minzhao, and Thanchanok (Tara), who spared their time to help me with both the happy and boring parts of the Ph.D. I cannot forget friends who went through hard times together, cheered me on, and celebrated each accomplishment. Anu Raghavi, Arunkumar, Gajan, Kaavya, Kawsihen, Navaroshan, Sirojan, and Tharshini -thank you for keeping my life nourished and fun-filled.Words cannot express my gratitude to my parents and family, Sivanathan, Sasikala, Abhayan, Aparajithan, and Dhanya for constantly encouraging me to pursue a doctoral degree. My deepest appreciation is dedicated to my wife, Anusuya. You have been extremely caring and supportive of me throughout this entire process and have made countless sacrifices to help me get to this point whilst carrying your own burdens. Also, I would like to thank Anusuya's parents and family members for their constant moral support during this journey. Aekan and Pavinesh, because of you, I laughed harder and smiled more.Finally, I'm grateful to the people of Australia, who as a country has generously offered me all the necessary rights, respect, peace and safe environment, some of which were even refused in my country of origin. vi

show abstract

“…More recently, RAND has been conducting a series of 360° Games sponsored by the Hewlett Foundation to develop a cybersecurity framework. 11…”

Section: Closingmentioning

confidence: 99%

Serious Analytical Gaming: The 360° Game for Multidimensional Analysis of Complex Problems

Henry¹,

Berner²,

Shlapak³

2017

Self Cite

View full text Add to dashboard Cite

• The 360° Game is best suited for situations in which the sponsor is dissatisfied with, or uncertain about, already proposed solutions. It may also be useful when other analytical approaches have proven insufficient. • It is played in a single, full day at a dedicated venue, moving between plenary and breakout activities. Players are divided into interdisciplinary cells in which they brainstorm, discuss, assess, and report candidate solutions for their slice of the bigger problem, which is given to them in the form of a multimedia scenario/ alternative future.

show abstract

Exploring Cyber Security Policy Options in Australia

Cited by 4 publications

References 0 publications

Shame in Cyber Security: Effective Behavior Modification Tool or Counterproductive Foil?

Shame in Cyber Security: Effective Behavior Modification Tool or Counterproductive Foil?

IoT Behavioral Monitoring via Network Traffic Analysis

Serious Analytical Gaming: The 360° Game for Multidimensional Analysis of Complex Problems

Contact Info

Product

Resources

About