Client-Centred Cybercrime Training : a Scottish case study

Sikra, Juraj and Renaud, Karen V. and Thomas, Daniel R. (2024) Client-Centred Cybercrime Training : a Scottish case study. In: The 2024 Dewald Roode Workshop on Information Systems Security Research, 2024-10-04 - 2024-10-05, KSU Center.

[thumbnail of Sikra-etal-DRW-2024-Client-centred-cybercrime-training]
Preview
 Text. Filename: Sikra-etal-DRW-2024-Client-centred-cybercrime-training.pdf
Accepted Author Manuscript
License: Strathprints license 1.0
Download (1MB)| Preview

Abstract

Background: The UK neoliberal government responsibilizes Small-to-Medium enterprises (SMEs) to take care of their own cyber-resilience, meaning that they do not receive any support if they fall victim to a cyber attack. Consequently, SMEs tend not to report cybercrimes. Aim: The aim was to collaboratively develop, deliver, and evaluate a client-centred cybercrime training session with an accompanying booklet as means of achieving closure post-attack, upskilling an SME, increasing their knowledge and improving reporting. Methods: We surveyed 9 staff of an attacked SME to elicit their training preferences; 6 staff members attended and 5 supplied feedback in the form of a post-training survey. From those who completed the survey, 2 staff members were interviewed. The results showed that the training helped some staff members take cyber-resilience into consideration because they supplied evidence of their learning either via the post-training survey or via the interviews. Results: The training served to improve staff’s cyber-resilience awareness and skill-set to a limited degree. It became clear that the government’s responsibilization agenda deterred staff from reporting cybercrimes to Police Scotland. Conclusions: Future work should engage with victimised SMEs and foster a trusting relationship. Academia can play a part in upskilling government-appointed cyber-resilience trainers.

ORCID iDs

Sikra, Juraj ORCID logoORCID: https://orcid.org/0000-0003-4557-1256, Renaud, Karen V. ORCID logoORCID: https://orcid.org/0000-0002-7187-6531 and Thomas, Daniel R. ORCID logoORCID: https://orcid.org/0000-0001-8936-0683;
  • Item type:Conference or Workshop Item(Paper)
    ID code:90365
    Dates:
    Date
    Event
    5 October 2024
    Published
    15 August 2024
    Accepted
    Subjects:
    Department:Faculty of Science > Computer and Information Sciences
    Depositing user: Pure Administrator
    Date deposited:27 Aug 2024 09:49
    Last modified:18 Oct 2024 00:58
    Related URLs:
    URI:https://strathprints.strath.ac.uk/id/eprint/90365
CORE (COnnecting REpositories)