Human Aspects of Information Security and Assurance 15th IFIP WG 11.12 International Symposium, HAISA 2021, Virtual Event, July 7–9, 2021, Proceedings

This book constitutes the proceedings of the 15th IFIP WG 11.12 International Symposium on Human Aspects of Information Security and Assurance, HAISA 2021, held virtually in July 2021.

The 18 papers presented in this volume were carefully reviewed and selected from 30 submissions. They are organized in the following topical sections: attitudes and perspectives; cyber security education; and people and technology.

Attitudes and Perspectives.- Cyber Security in Healthcare Organisations.- Cybersecurity and digital exclusion of seniors: what do they fear?.- Exploring experiences of using SETA in Nordic municipalities.- Cyber Security Education.- SherLOCKED: A Detective-themed Serious Game for Cyber Security Education.- A Reference Point for Designing a Cybersecurity Curriculum for Universities.- A Conceptual Information Security Culture Framework for Higher Learning Institutions.- What can we learn from the analysis of information security policies: the case of UK’s schools.- A Wolf, Hyena, and Fox game that tells pre-school children about cybersecurity.- Evaluation strategies for cybersecurity training methods: a literature review.- People and Technology.- When Googling it doesn't work: The challenge of finding security advice for smart home devices.- Making Access Control Easy in IoT.- The Development of a Multidisciplinary Cybersecurity Workforce: An Investigation.- Friend or Foe: An investigation into recipient identification of SMS-based phishing.- Towards a Risk Assessment Matrix for Information Security Workarounds.- A Theoretical Underpinning for Examining Insider Attacks leveraging the Fraud Pentagon.- A Systematic Literature Review on Virtual Reality Authentication.- Performance and Usability of Visual and Verbal Verification of Word-based Key Fingerprints.- The one-eyed leading the blind: Understanding differences between IT professionals and non-IT staff when creating and managing passwords.