Published incidents and their proportions of human error. (3rd June 2019)

• Record Type: Journal Article
• Authors: Evans, Mark Glenn; He, Ying; Yevseyeva, Iryna; Janicke, Helge
• Is Part Of: Information and computer security. Volume 27:Number 3(2019)
• Page Start: 343
• Page End: 357
• Publication Date: 2019-06-03
• Subjects: Information security -- Human error -- Incidents -- Breaches -- HEART -- GISAT; Computer security -- Management -- Periodicals; Computer networks -- Security measures -- Periodicals; Data protection -- Management -- Periodicals; 658.47
• DOI: 10.1108/ICS-12-2018-0147
• Languages: English
• ISSNs: 2056-4961

Abstract

Abstract : Purpose: This paper aims to provide an understanding of the proportions of incidents that relate to human error. The information security field experiences a continuous stream of information security incidents and breaches, which are publicised by the media, public bodies and regulators. Despite the need for information security practices being recognised and in existence for some time, the underlying general information security affecting tasks and causes of these incidents and breaches are not consistently understood, particularly with regard to human error. Design/methodology/approach: This paper analyses recent published incidents and breaches to establish the proportions of human error and where possible subsequently uses the HEART (human error assessment and reduction technique) human reliability analysis technique, which is established within the safety field. Findings: This analysis provides an understanding of the proportions of incidents and breaches that relate to human error, as well as the common types of tasks that result in these incidents and breaches through adoption of methods applied within the safety field. Originality/value: This research provides original contribution to knowledge through the analysis of recent public sector information security incidents and breaches to understand the proportions that relate to human error.