Lacking the Tools and Support to Fix Friction: Results from an Interview Study...
summary
Fourteen semi-structured interviews with CISOs and security consultants (about 20 years’ experience) find managers acknowledge security causes productivity friction but rarely fix it: compliance with external norms and lacking training, metrics, and budget leave them aware but powerless. Most endorse “just convince employees” while only one or two report changing policies or adopting password managers. Sample is all male. Recommended fixes are concrete: embed usable security in regulations, create KPIs, train managers, and use security champions.
AI-written summary · about
chapters (10)
- 0:00Research introduction
- 1:56Security managers' awareness
- 3:21Defining security friction
- 5:07Research questions
- 6:54Causes of security friction
- 7:59Impact on organizations
- 8:43Proposed solutions
- 10:11Training gaps
- 11:17Future directions
- 12:19Q&A
related talks
40mCulture Matters—Put People at the Heart of Security
50m2023: Cyber Professionals Challenges and Insights. Let's Talk.
19mCybersecurity's Silent Crisis: Protecting the Human Element
05mThe practical steps an organisation needs to take and the interface...
15mTelling Hard Truths to Impact Change in Cybersecurity
49mNavigating Challenges: Perspectives of Information Security Professionals
50mSecurity's Social Problem
50mYou’re Doing It Wrong! Common Security Anti Patterns