The University of Southampton
University of Southampton Institutional Repository

It’s not my problem: how healthcare models relate to SME cybersecurity awareness

It’s not my problem: how healthcare models relate to SME cybersecurity awareness
It’s not my problem: how healthcare models relate to SME cybersecurity awareness
Small and medium enterprises (SMEs) make up a significant part of European economies. Despite their economic importance, they are often described as poorly placed to deal with cyber risks because of resource constraints or commercial interests. Providing appropriate tooling would facilitate a greater appreciation of the risks and provide mitigation strategies. In a series of workshops demonstrating visualization tools for cybersecurity, constructs from healthcare models such as awareness, self-efficacy, and a willingness to engage were investigated to throw light on the likelihood that the technologies would be adopted. Although most constructs were validated, it turns out that self-efficacy could more appropriately be interpreted as a desire to understand a broader company narrative rather than empowering any individual to identify and manage cyber risk. As part of an ongoing examination of technology acceptance, this work provides further evidence that technology must be contextualised to make sense for the individual as part of the SME rather than as individual employee.
Cybersecurity awareness, SME, Small-story narratives, Technology adoption, Health belief model, Normalisation Process Theory
0302-9743
337-352
Pickering, Brian
225088d0-729e-4f17-afe2-1ad1193ccae6
Boletsis, Costas
43c234e1-6251-41c9-87b7-3bc4814840c3
Halvorsrud, Ragnhild
57c50c4b-1458-41a4-b81f-4b56e4d644b7
Phillips, Stephen
47610c30-a543-4bac-a96a-bc1fce564a59
Surridge, Michael
3bd360fa-1962-4992-bb16-12fc4dd7d9a9
Moallem, Abbas
Pickering, Brian
225088d0-729e-4f17-afe2-1ad1193ccae6
Boletsis, Costas
43c234e1-6251-41c9-87b7-3bc4814840c3
Halvorsrud, Ragnhild
57c50c4b-1458-41a4-b81f-4b56e4d644b7
Phillips, Stephen
47610c30-a543-4bac-a96a-bc1fce564a59
Surridge, Michael
3bd360fa-1962-4992-bb16-12fc4dd7d9a9
Moallem, Abbas

Pickering, Brian, Boletsis, Costas, Halvorsrud, Ragnhild, Phillips, Stephen and Surridge, Michael (2021) It’s not my problem: how healthcare models relate to SME cybersecurity awareness. Moallem, Abbas (ed.) In HCI for Cybersecurity, Privacy and Trust: Third International Conference, HCI-CPT 2021, Held as Part of the 23rd HCI International Conference, HCII 2021, Virtual Event, July 24–29, 2021, Proceedings. vol. 12788, pp. 337-352 . (doi:10.1007/978-3-030-77392-2_22).

Record type: Conference or Workshop Item (Paper)

Abstract

Small and medium enterprises (SMEs) make up a significant part of European economies. Despite their economic importance, they are often described as poorly placed to deal with cyber risks because of resource constraints or commercial interests. Providing appropriate tooling would facilitate a greater appreciation of the risks and provide mitigation strategies. In a series of workshops demonstrating visualization tools for cybersecurity, constructs from healthcare models such as awareness, self-efficacy, and a willingness to engage were investigated to throw light on the likelihood that the technologies would be adopted. Although most constructs were validated, it turns out that self-efficacy could more appropriately be interpreted as a desire to understand a broader company narrative rather than empowering any individual to identify and manage cyber risk. As part of an ongoing examination of technology acceptance, this work provides further evidence that technology must be contextualised to make sense for the individual as part of the SME rather than as individual employee.

This record has no associated files available for download.

More information

Published date: 26 May 2021
Venue - Dates: 23rd International Conference on Human-Computer Interaction, Virtual, 2021-07-24 - 2021-07-29
Keywords: Cybersecurity awareness, SME, Small-story narratives, Technology adoption, Health belief model, Normalisation Process Theory

Identifiers

Local EPrints ID: 485487
URI: http://eprints.soton.ac.uk/id/eprint/485487
ISSN: 0302-9743
PURE UUID: 259b4032-13e3-4f6c-bc7d-1acaa3a30921
ORCID for Brian Pickering: ORCID iD orcid.org/0000-0002-6815-2938
ORCID for Stephen Phillips: ORCID iD orcid.org/0000-0002-7901-0839

Catalogue record

Date deposited: 07 Dec 2023 17:34
Last modified: 17 Mar 2024 03:23

Export record

Altmetrics

Contributors

Author: Brian Pickering ORCID iD
Author: Costas Boletsis
Author: Ragnhild Halvorsrud
Author: Stephen Phillips ORCID iD
Author: Michael Surridge
Editor: Abbas Moallem

Download statistics

Downloads from ePrints over the past year. Other digital versions may also be available to download e.g. from the publisher's website.

View more statistics

Atom RSS 1.0 RSS 2.0

Contact ePrints Soton: eprints@soton.ac.uk

ePrints Soton supports OAI 2.0 with a base URL of http://eprints.soton.ac.uk/cgi/oai2

This repository has been built using EPrints software, developed at the University of Southampton, but available to everyone to use.

We use cookies to ensure that we give you the best experience on our website. If you continue without changing your settings, we will assume that you are happy to receive cookies on the University of Southampton website.

×