Encouraging organisational information security incident reporting

Tools

Ballreich, Fabian Lucas and Volkamer, Melanie and Müllmann, Dirk and Berens, Benjamin and Häußler, Elena Marie and Renaud, Karen; (2023) Encouraging organisational information security incident reporting. In: EuroUSEC '23. ACM International Conference Proceeding Series . ACM, DNK, 224–236. ISBN 9798400708145 (https://doi.org/10.1145/3617072.3617098)

[thumbnail of Ballreich-etal-EuroUSEC-2023-Encouraging-organisational-information-security]
Preview
 Text. Filename: Ballreich-etal-EuroUSEC-2023-Encouraging-organisational-information-security.pdf
Accepted Author Manuscript
License: Strathprints license 1.0
Download (1MB)| Preview

Abstract

21st-century organisations can only learn how to respond effectively to, and recover from, adverse information security incidents if their employees report any incidents they notice. This should happen irrespective of whether or not they themselves triggered the incident. Organisations have started to inform their employees about their incident reporting obligations. However, there is little research that organisations can benefit from to make their reporting provisions maximally effective. For this work, we follow a multi-step approach.(1) We review the related research on reporting, including reporting reluctance, and the legalities of incident reporting in the European Union. (2) We explain how we developed variations of information texts that raise awareness of incident reporting obligations and aim to ameliorate reporting reluctance. (3) We conducted an online user study (n=257) to identify the most effective information text. (4) The most effective text was deployed by the CISO of a German energy company and we collected feedback from 24 employees to support a qualitative analysis. We discuss our experiences and the implications of such information text design. We make recommendations for encouraging information security incident reporting and suggest future work.

ORCID iDs

Ballreich, Fabian Lucas, Volkamer, Melanie, Müllmann, Dirk, Berens, Benjamin, Häußler, Elena Marie and Renaud, Karen ORCID logoORCID: https://orcid.org/0000-0002-7187-6531;
CORE (COnnecting REpositories)