Stress Amongst Novice Information Security Risk Management Practitioners

International Journal On Cyber Situational Awareness (IJCSA)

ISSN: (Print) 2057-2182 ISSN: (Online) 2057-2182

DOI: 10.22619/IJCSA

Published Semi-annually. Est. 2014


Dr Cyril Onwubiko, Chair – Cyber Security & Intelligence, E-Security Group, Research Series, London, UK; IEEE UK & Ireland Section Secretary

Associate Editors:

Professor Frank Wang, Head of School / Professor of Future Computing, Chair IEEE Computer Society, UK&RI, School of Computing, University of Kent, Canterbury, UK

Professor Karen Renaud, Professor of Cyber Security, University of Abertay, Dundee, Scotland, UK

Stress Amongst Novice Information Security Risk Management Practitioners

Erik Bergström and Martin Lundgren


Today, information is a key asset for many organisations. Reducing risks of information compromise is increasingly prioritised. However, there is an incomplete understanding of how organisations with limited security knowledge and experience manage information security risks in practice. Previous studies have suggested that security-novice employees faced with burdensome, complex, and ambiguous security requirements can experience security-related stress (SRS), and ultimately influence their security decisions. In this study, we further this research stream by suggesting that SRS can similarly be found with security-novice managers responsible for developing and practising information security risk management (ISRM). Two organisations were targeted in the study using a case study approach, to obtain data about their practices, using SRS as an analytical lens. The study found various examples where SRS influenced security-novice managers’ decisions, and identifies several stressors and stress inhibitors in the ISRM process and supporting ISRM tools, and discusses the implications for practitioners.

Keywords: Security-novice, information security, information security risk management, stress, tools, compliance, management.

ISSN: 2057-2182

Volume 4. No. 1

DOI: 10.22619/IJCSA.2019.100128

Date: Dec. 2019

Reference to this paper should be made as follows: Erik Bergström and Martin Lundgren (2019). Stress Amongst Novice Information Security Risk Management Practitioners. International Journal on Cyber Situational Awareness, Vol. 4, No. 1, pp128-154.

PDF Download