Beautement, A; Becker, I; Parkin, S; Krol, K; Sasse, MA; (2016) Productive Security: A Scalable Methodology for Analysing Employee Security Behaviours. In: Proceedings of the Symposium on Usable Privacy and Security (SOUPS) 2016. (pp. pp. 253-270). USENIX Association: Denver, CO, USA.

Preview

Text soups_16_Productive_Security_Final.pdf - Published Version Download (285kB) | Preview

Abstract

Organisational security policies are often written without sufficiently taking in to account the goals and capabilities of the employees that must follow them. Effective security management requires that security managers are able to assess the effectiveness of their policies, including their impact on employee behaviour. We present a methodology for gathering large scale data sets on employee behaviour and attitudes via scenario-based surveys. The survey questions are grounded in rich data drawn from interviews, and probe perceptions of security measures and their impact. Here we study employees of a large multinational company, demonstrating that our approach is capable of determining important differences between various population groups. We also report that our work has been used to set policy within the partner organisation, illustrating the real-world impact of our research.

Download activity - last month

Export as JSONCSVXML

Download activity - last 12 months

Export as JSONCSVXML

Downloads by country - last 12 months

Export as CSVJSONXML

Archive Staff Only

View Item