Assessing the Insider: dis/engaged hero or armed villain

这项工作旨在通过理解参与来探索人为因素，以及参与的障碍可能是什么，以及它们对网络安全行为意味着什么。敬业度可以涉及旨在影响行为改变的沟通活动，但敬业度也可以涉及雇主和雇员之间的关系，以及承诺、信任、忠诚的程度，心理契约和道德脱离可能在发展中发挥作用，（或缺席）我们不能假设，只要有适当的工具和知识，人们就会参与并采用有益的网络安全行为只是因为他们被要求。这项工作探讨了隐藏的深度心理学上讲，以更好地了解人为因素，以及它们如何与网络安全，以及最有效的方式刺激长期行为改变通过网络安全意识的宣传。到目前为止，评估的意识运动围绕社会媒体的统计数据，这在试图了解实际影响和行为变化时是没有帮助的。这项工作还深入研究了内部威胁，旨在开发预防工具，使用指标，以在早期阶段识别内部风险。这对所有组织都是有用的，尤其是安全部门，他们更需要雇佣和留住那些将继续致力于保护国家及其基础设施的人才。通过这种方式，这项工作旨在制定方法来推进和促进干预措施，以帮助在面对网络攻击和间谍活动的持续威胁时创造一个安全和繁荣的环境。

This work aims to explore human factors by understanding engagement, and what thebarriers to engagement might be, and what they mean for cybersecurity behaviour. Engagementcan involve communications campaigns which aim to influence behaviour change butengagement can also relate to the relationship between the employer and theemployee, and the degree of commitment, trust, loyalty, psychological contract andmoral disengagement that may be playing a part in the development (or absence) ofcybersecurity behaviour.We can't assume that given the appropriate tools and knowledge that people willengage and adopt conducive cybersecurity behaviour just because they are asked to.This work explores the hidden depths psychologically-speaking, to better understandhuman factors and how they relate to cybersecurity, and the most effective ways ofstimulating long-term behaviour change through cybersecurity awareness campaigns.So far, evaluation of awareness campaigns have centred around social media statistics,which is not helpful when trying to understand actual impact and behaviour change.This work also looks deeply into Insider Threat and aims to develop preventative toolswith the use of metrics that serve to identify insider risk at an early stage. This is usefulto all organisations, but particularly security services who have a graver need to hireand retain talent that will remain committed and morally engaged to protecting thenation and its infrastructure.In this way, this work aims to develop ways to advance and promote interventions thathelp to create a secure and thriving environment in the face of constant threat of cyberattackand espionage.