Assessing the Insider: dis/engaged hero or armed villain

点击翻译按钮获取中文摘要

This work aims to explore human factors by understanding engagement, and what thebarriers to engagement might be, and what they mean for cybersecurity behaviour. Engagementcan involve communications campaigns which aim to influence behaviour change butengagement can also relate to the relationship between the employer and theemployee, and the degree of commitment, trust, loyalty, psychological contract andmoral disengagement that may be playing a part in the development (or absence) ofcybersecurity behaviour.We can't assume that given the appropriate tools and knowledge that people willengage and adopt conducive cybersecurity behaviour just because they are asked to.This work explores the hidden depths psychologically-speaking, to better understandhuman factors and how they relate to cybersecurity, and the most effective ways ofstimulating long-term behaviour change through cybersecurity awareness campaigns.So far, evaluation of awareness campaigns have centred around social media statistics,which is not helpful when trying to understand actual impact and behaviour change.This work also looks deeply into Insider Threat and aims to develop preventative toolswith the use of metrics that serve to identify insider risk at an early stage. This is usefulto all organisations, but particularly security services who have a graver need to hireand retain talent that will remain committed and morally engaged to protecting thenation and its infrastructure.In this way, this work aims to develop ways to advance and promote interventions thathelp to create a secure and thriving environment in the face of constant threat of cyberattackand espionage.