| Title | Security-Related Stress: A Perspective on Information Security Risk Management |
| Publication Type | Conference Paper |
| Year of Publication | 2019 |
| Authors | Lundgren, Martin, Bergström, Erik |
| Conference Name | 2019 International Conference on Cyber Security and Protection of Digital Services (Cyber Security) |
| Date Published | jun |
| Keywords | compliance, Information security, Information Security Risk Management, ISRM tools, Management, Metrics, novices, pubcrawl, Resiliency, risk management, Scalability, security of data, security risk management, security standards, security-novice practitioners, security-related stress, Standards, Stress, stress inhibitors, Tools |
| Abstract | In this study, the enactment of information security risk management by novice practitioners is studied by applying an analytical lens of security-related stress. Two organisations were targeted in the study using a case study approach to obtain data about their practices. The study identifies stressors and stress inhibitors in the ISRM process and the supporting ISRM tools and discusses the implications for practitioners. For example, a mismatch between security standards and how they are interpreted in practice has been identified. This mismatch was further found to be strengthened by the design of the used ISRM tools. Those design shortcomings hamper agility since they may enforce a specific workflow or may restrict documentation. The study concludes that security-related stress can provide additional insight into security-novice practitioners' ISRM challenges. |
| DOI | 10.1109/CyberSecPODS.2019.8884877 |
| Citation Key | lundgren_security-related_2019 |
Security-Related Stress: A Perspective on Information Security Risk Management