Human-Centred Cyber Security

Area of Interest: Cyber Security

Expand your understanding of cyber security beyond the sphere of technology by addressing the role that human behaviour plays in securing and subverting systems. The course takes a transdisciplinary approach, combining academic research from a range of disciplines (such as computer science, psychology, international relations and political science) with practitioner experience, to explore ways of creating solutions to complex cyber security problems.

You will explore the relationships between people and technology from the perspective of users, designers and developers of technology, as well as policy makers. The course culminates in an exploration—grounded in security theory—of what it means to be 'cyber secure' as an individual, as a society, and as a nation state.

At a practical level, you will learn how to evaluate tools to understand and shape cyber security behaviours. And you will develop expertise that enables you to critique cyber security strategies and policies, and generate productive security dialogues across communities.

This course is broken into the following core learning topics:

Day 1

• Insider Threat: Categorise malicious and non-malicious insider threats, apply and critique rational choice theory, analyse motivations, and explore mitigation techniques.
• Useable Security: Understand human problems with security tools, security design guidelines, and principles of usable security.

Day 2

• Security Awareness: Understand end users’ perspectives and different approaches to security awareness.
• Behaviour Change: Understand how to change security behaviours by using an established behaviour change model to develop and critique behaviour change interventions.

Day 3

• Everyday Security: Understand and apply security theory to critically reflect on security for citizens

On completion of this course you will be able to:

• analyse theories that explain both malicious and non-malicious insider threat in an organisational contex
• justify the value of usable security in mitigating cyber security risk in an organisational contex
• critique the design of an online cyber security awareness programme
• develop a plan for a behaviour change intervention to improve a given cyber security behaviour
• critically reflect on security theory in the context of online government services.

Anyone working in or around cyber security who has input at the strategic or policy level in an organisation or in Government.

Elements of this course have been part of training programmes for UK Defence and Security technologists.

Debi is Professor of Cyber Security and Director of the Institute for Cyber Security at UNSW. She previously held the DST Group-University of Adelaide Joint Chair in Cyber Security. In addition, she is a Visiting Professor at Royal Holloway, University of London in the UK. She has worked extensively across the public and private sector for organisations such as the MoD, Cabinet Office, Home Office, Euroclear, Barclaycard, Reuters and Close Bros. She is the co-author of 'Risk Management for Computer Security: Protecting Your Network & Information Assets.

Andrew is Deputy Director of the Institute for Cyber Security at UNSW. He is a registered Organisational Psychologist and received his PhD from the University of Adelaide, where he maintains an affiliation as a Visiting Research Fellow. Andrew’s career spans consultancy, not-for-profit, academia, Defence Science and Technology, and board roles. He has developed guidance to disrupt attacker decision-making, enhance mental health in cybersecurity professionals, and create effective tools to evaluate and foster robust cybersecurity cultures within organisations.

Also check out other Business events in Canberra, Workshops in Canberra, Arts events in Canberra.