Client-Centred Cybercrime Training : a Scottish case study
Sikra, Juraj and Renaud, Karen V. and Thomas, Daniel R. (2024) Client-Centred Cybercrime Training : a Scottish case study. In: The 2024 Dewald Roode Workshop on Information Systems Security Research, 2024-10-04 - 2024-10-05, KSU Center.
Preview |
Text.
Filename: Sikra-etal-DRW-2024-Client-centred-cybercrime-training.pdf
Accepted Author Manuscript License: Strathprints license 1.0 Download (1MB)| Preview |
Abstract
Background: The UK neoliberal government responsibilizes Small-to-Medium enterprises (SMEs) to take care of their own cyber-resilience, meaning that they do not receive any support if they fall victim to a cyber attack. Consequently, SMEs tend not to report cybercrimes. Aim: The aim was to collaboratively develop, deliver, and evaluate a client-centred cybercrime training session with an accompanying booklet as means of achieving closure post-attack, upskilling an SME, increasing their knowledge and improving reporting. Methods: We surveyed 9 staff of an attacked SME to elicit their training preferences; 6 staff members attended and 5 supplied feedback in the form of a post-training survey. From those who completed the survey, 2 staff members were interviewed. The results showed that the training helped some staff members take cyber-resilience into consideration because they supplied evidence of their learning either via the post-training survey or via the interviews. Results: The training served to improve staff’s cyber-resilience awareness and skill-set to a limited degree. It became clear that the government’s responsibilization agenda deterred staff from reporting cybercrimes to Police Scotland. Conclusions: Future work should engage with victimised SMEs and foster a trusting relationship. Academia can play a part in upskilling government-appointed cyber-resilience trainers.
ORCID iDs
Sikra, Juraj ORCID: https://orcid.org/0000-0003-4557-1256, Renaud, Karen V. ORCID: https://orcid.org/0000-0002-7187-6531 and Thomas, Daniel R. ORCID: https://orcid.org/0000-0001-8936-0683;-
-
Item type: Conference or Workshop Item(Paper) ID code: 90365 Dates: DateEvent5 October 2024Published15 August 2024AcceptedSubjects: Department: Faculty of Science > Computer and Information Sciences Depositing user: Pure Administrator Date deposited: 27 Aug 2024 09:49 Last modified: 08 Nov 2024 01:54 Related URLs: URI: https://strathprints.strath.ac.uk/id/eprint/90365