Towards a Risk Assessment Matrix for Information Security Workarounds - Human Aspects of Information Security and Assurance Access content directly
Conference Papers Year : 2021

Towards a Risk Assessment Matrix for Information Security Workarounds

Eugene Slabbert
  • Function : Author
  • PersonId : 1239898
Kerry-Lynn Thomson
  • Function : Author
  • PersonId : 1047176
Lynn Futcher
  • Function : Author
  • PersonId : 1047164

Abstract

Workarounds are often a necessary response to obstructions or inefficiencies within organisations. Their utilisation could, however, introduce information security risk into an organisation. It is, therefore, important for organisations to firstly identify, then determine the reasons for information security workarounds, and how to assess the potential risk they pose to the organisation. Workarounds are generally triggered by human factors which can be explained with the Protection Motivation Theory, as well as environmental influences that exist within an organisation. This is shown in the paper using a flowchart to illustrate the decision-making process of employees regarding information security workarounds. Having understood why workarounds occur within a particular organisation, the value of their information security risk can be determined using a Risk Assessment Matrix for information security workarounds and an accompanying Information Security Workaround Risk Index. Using the tools proposed in this paper, information security officers can respond appropriately to information security workarounds and, where necessary, make modifications to their information security policies, depending on the potential risk associated with the identified information security workarounds.
Fichier principal
Vignette du fichier
509924_1_En_14_Chapter.pdf (1.54 Mo) Télécharger le fichier
Origin : Files produced by the author(s)

Dates and versions

hal-04041069 , version 1 (22-03-2023)

Licence

Attribution

Identifiers

Cite

Eugene Slabbert, Kerry-Lynn Thomson, Lynn Futcher. Towards a Risk Assessment Matrix for Information Security Workarounds. 15th International Symposium on Human Aspects of Information Security and Assurance (HAISA), Jul 2021, Virtual, United Kingdom. pp.164-178, ⟨10.1007/978-3-030-81111-2_14⟩. ⟨hal-04041069⟩
8 View
4 Download

Altmetric

Share

Gmail Facebook X LinkedIn More