A risk management process for consumers: the next step in information security

  • Authors:
  • André van Cleeff

  • Affiliations:
  • University of Twente, Enschede, Netherlands

  • Venue:
  • Proceedings of the 2010 workshop on New security paradigms
  • Year:
  • 2010

Quantified Score

Hi-index 0.00

Visualization

Abstract

Simply by using information technology, consumers expose themselves to considerable security risks. Because no technical or legal solutions are readily available, and awareness programs have limited impact, the only remedy is to develop a risk management process for consumers. Consumers need to understand the IT risks they face, and decide how to deal with them in an iterative and structured manner: implement technical mitigations, alter their behavior or simply accept the risks. Such a process is feasible: enterprises already execute such processes, and time-saving tools can support the consumer in her own process. In fact, given our society's emphasis on individual responsibilities, skills and devices, a risk management process for consumers is the logical next step in improving information security information security.