PsySecPsychological Security

Research / Studies

SupportsConceptual · 2018

Is the responsibilization of the cyber security risk reasonable and judicious?

Karen Renaud, Stephen Flowerday, Merrill Warkentin, Paul Cockshott, Craig Orgeron · Computers & Security, 78, 2018

Key finding

Argues that governments shifting cyber risk onto individual citizens ('responsibilization'), by issuing advice and leaving consequences to them, is contributing to cybercrime's success. Proposes a more active risk-regulation regime instead.

Why it matters for PsySec

Challenges the premise that individuals should bear the blame for cyber risk, supporting shared, systemic responsibility over individual fault.

Stance: Supports. Evidence consistent with a PsySec claim. Summaries are written by the database editors; read the original for full results and limitations.

Tags

P2. Culture eats compliance for breakfast Belief Blame and fearSecurity cultureCompliance

Behaviors this study informs

Cite this study

APA

Renaud, K., Flowerday, S., Warkentin, M., Cockshott, P., & Orgeron, C. (2018). Is the responsibilization of the cyber security risk reasonable and judicious?. Computers & Security, 78. https://doi.org/10.1016/j.cose.2018.06.006

BibTeX

@article{renaud_2018_responsibilization,
  title = {Is the responsibilization of the cyber security risk reasonable and judicious?},
  author = {Karen Renaud and Stephen Flowerday and Merrill Warkentin and Paul Cockshott and Craig Orgeron},
  year = {2018},
  journal = {Computers & Security, 78},
  doi = {10.1016/j.cose.2018.06.006},
  url = {https://doi.org/10.1016/j.cose.2018.06.006}
}