An Adversarial Viewpoint of Human and Organizational Factors in Computer and Information Security: Final Report

Abstract

This report presents a multi-dimensional examination of the human and organizational factors that effect computer and information security (CIS) and explains how human and organizational factors contribute to CIS vulnerabilities, namely, the various pathways and mechanisms leading to a technical CIS vulernability. Human factors in CIS, such as password memorability or usability of encryption methods, in addition to organizational factors in CIS, such as implementation and monitoring of security policies or procedures are analyzed.