Stress Amongst Novice Information Security Risk Management Practitioners

Document identifier: oai:DiVA.org:ltu-77107
Access full text here:10.22619/IJCSA
Keyword: Social Sciences, Media and Communications, Information Systems, Social aspects, Samhällsvetenskap, Medie- och kommunikationsvetenskap, Systemvetenskap, informationssystem och informatik med samhällsvetenskaplig inriktning, Security-novice, Information security, Information security risk management, Stress, Tools, Compliance, Management, Information systems, Informationssystem
Publication year: 2019
Relevant Sustainable Development Goals (SDGs):
SDG 16 Peace, justice and strong institutions
The SDG label(s) above have been assigned by OSDG.ai

Abstract:

Today, information is a key asset for many organisations. Reducing risks of information compromise is increasingly prioritised. However, there is an incomplete understanding of how organisations with limited security knowledge and experience manage information security risks in practice. Previous studies have suggested that security-novice employees faced with burdensome, complex, and ambiguous security requirements can experience security-related stress (SRS), and ultimately influence their security decisions. In this study, we further this research stream by suggesting that SRS can similarly be found with security-novice managers responsible for developing and practising information security risk management (ISRM). Two organisations were targeted in the study using a case study approach, to obtain data about their practices, using SRS as an analytical lens. The study found various examples where SRS influenced security-novice managers’ decisions, and identifies several stressors and stress inhibitors in the ISRM process and supporting ISRM tools, and discusses the implications for practitioners.

Authors

Erik Bergström

Jönköping University; Computer Science and Informatics
Other publications >>

Martin Lundgren

Luleå tekniska universitet; Digitala tjänster och system; Information Systems
Other publications >>

Documents attached


Click on thumbnail to read

Record metadata

Click to view metadata