Cybersecurity regrets : I’ve had a few .... je ne regrette

Renaud, Karen and Searle, Rosalind and Dupuis, Marc J. (2022) Cybersecurity regrets : I’ve had a few .... je ne regrette. In: New Security Paradigms Workshop 2022, 2022-10-24 - 2022-10-27.

[thumbnail of Renaud-etal-NSP-2022-Cybersecurity-regrets-Ive-had-a-few-je-ne-regrette]
Preview
Text. Filename: Renaud_etal_NSP_2022_Cybersecurity_regrets_Ive_had_a_few_je_ne_regrette.pdf
Accepted Author Manuscript
License: Strathprints license 1.0

Download (921kB)| Preview

Abstract

James Baldwin says: "though we would like to live without regrets, and sometimes proudly insist that we have none, this is not really possible, if only because we are mortal". The field of cybersecurity has its fair share of poor outcomes, some of which are bound to be due to regrettable actions. Similar to other negative emotions, such as fear and shame, it is likely that organisations are using anticipated regret as a behavioural control mechanism in the cybersecurity domain. We explore the nature and characteristics of cyber-related regrets, and the extent to which regret (both anticipated and ex- perienced) influences future cybersecurity decisions. We derive a process model of regret and report on the way cybersecurity regrets occur, what their outcomes are, and how people experience them. We conclude with suggested directions for future research.

ORCID iDs

Renaud, Karen ORCID logoORCID: https://orcid.org/0000-0002-7187-6531, Searle, Rosalind and Dupuis, Marc J.;