Persona-Centred Information Security Awareness

Maintaining Information Security and protecting data assets remains a principal concern for businesses. Many data breaches continue to result from accidental, intentional or malicious human factors, leading to financial or reputational loss. One approach towards improving behaviours and culture is with the application of on-going awareness activities. This paper presents an approach for identifying security related human factors by incorporating personas into information security awareness design and implementation. The personas, which are grounded in empirical data, offer a useful method for identifying audience needs and security risks, enabling a tailored approach to business-specific awareness activities. As a means for integrating personas, we present six on-going steps that can be embedded into business-as-usual activities with 90-day cycles of awareness themes, and evaluate our approach with a case study business. Our findings suggest a persona-centred information security awareness approach has the capacity to adapt to the time and resource required for its implementation within the business, and offer a positive contribution towards reducing or mitigating Information Security risks through security awareness

Service Design Against Organised Crime

This paper proposes benefits of using service design against organised crime. As a vehicle to this discussion, the focus is an anti-child-trafficking project at Northumbria University in the UK, involving its multidisciplinary Northumbria Crime Prevention Network. The last 10 years have shown increasing evidence of people trafficking, internationally (DoS, 2010), generally for the purposes of illegal labour and/or sex. A significant fraction of those who are trafficked are children. The majority of these children are in their mid-teens, but some are as young as five years old. The C4 persona-based critical design process, (Hilton, 2008), is proposed to strategically enable a service design approach to counter organised crime, by first developing the required criminal personas in order to use their competitive perspectives in critical review of the preventative initiatives. Opportunities from such a service design approach, to child trafficking for example would include new means of: interruption or redirection of child trafficking services so that these children end up in legitimate care; also the proposition of considering new opportunities and improvements in child trafficking service routes and processes as a means of second guessing how and where Recruiters, Transporters, and Exploiters, (Van Dijck, 2005), might next be found operating, and then through border and security agencies successfully countered

Co-designing smart home technology with people with dementia or Parkinson's disease

Involving users is crucial to designing technology successfully, especially for vulnerable users in health and social care, yet detailed descriptions and critical reflections on the co-design process, techniques and methods are rare. This paper introduces the PERCEPT (PERrsona-CEntred Participatory Technology) approach for the co-design process and we analyse and discuss the lessons learned for each step in this process. We applied PERCEPT in a project to develop a smart home toolset that will allow a person living with early stage dementia or Parkinson's to plan, monitor and self-manage his or her life and well-being more effectively. We present a set of personas which were co-created with people and applied throughout the project in the co-design process. The approach presented in this paper will enable researchers and designers to better engage with target user groups in co-design and point to considerations to be made at each step for vulnerable users

Persona-driven information security awareness.

Because human factors are a root cause of security breaches in many organisations, security awareness activities are often used to address problematic behaviours and improve security culture. Previous work has found that personas are useful for identifying audience needs and goals, when designing and implementing awareness campaigns. We present a six-step security awareness process both driven by and centred around the use of personas. This can be embedded into business-as-usual activities, with 90-day cycles of awareness themes. We evaluated this process by using it to devise a security awareness campaign for a digital agency. Our results suggest a persona-centred security awareness approach is adaptable to business constraints, and contributes towards addressing security risks

Bearing witness: working with clients who have experienced trauma - considerations for a person-centered approach to counseling

This paper explores traumatic experience from both a cultural and neurophysiological perspective. An argument is developed to support and challenge the person-centered approach in working with clients who have experienced trauma. Through a case study, elements of theory are illustrated. Drawing from the increased knowledge base in neurophysiology, this paper aims to strengthen confidence in wider empathic attunement and brings attention to safety for both client

Using System Analysis and Personas for e-Health Interaction Design

Today, designers obtain more central roles in product and service development (Perks, Cooper, & Jones, 2005). They have to deal with increasingly complicated problems, like integrating the needs of various stakeholders while taking care about social, ethical and ecological consequences of their designs. To deal with this demanding design situation, they need to apply new methods to organize the available information and to negotiate the stakeholder’s perspectives. This paper describes how systems analysis supports the design process in a complex environment. In a case study, we demonstrate how this method enables designers to describe user requirements for complex design environments while considering the perspectives of various stakeholders. We present a design research project applying cybernetic systems analysis using the software ''System-Tools'' (Vester, 2002). Results from the analysis were taken to inform the design of an electronic patient record (EPR), considering the particularities of the German health care system. Based on the analysis, we developed a set of requirements for every stakeholder group, detailing the patients' perspective with persona descriptions. We then picked a main persona as reference for the EPR design. We describe the resulting design sketch and discuss the value of cybernetic systems analysis as a tool to deal with complex social environments. The result shows how the method helps designers to structure and organize information about the context and identify fruitful intervention opportunities for design. Keywords: E-Health; System Analysis, Cybernetics; Personas.</p

Reconceptualising Personas Across Cultures: Archetypes, Stereotypes & Collective Personas in Pastoral Namibia

The paucity of projects where persona is the research foci and a lack of consensus on this artefact keep many reticent about its purpose and value. Besides crafting personas is expected to differ across cultures, which contrasts the advancements in Western theory with studies and progress in other sites. We postulate User-Created Personas reveal specific characteristics of situated contexts by allowing laypeople to design persona artefacts in their own terms. Hence analysing four persona sessions with an ethnic group in pastoral Namibia –ovaHerero– brought up a set of fundamental questions around the persona artefact regarding stereotypes, archetypes, and collective persona representations: (1) to what extent user depictions are stereotypical or archetypal? If stereotypes prime (2) to what degree are current personas a useful method to represent end-users in technology design? And, (3) how can we ultimately read accounts not conforming to mainstream individual persona descriptions but to collectives

Simulación y competencias no técnicas en el contexto de emergencia pre-hospitalar: estudio cualitativo

Unidade de Monitorização em Indicadores de Saúde - UMISAbstract - To understand the importance that nurses assign to simulation in the development of non-technical skills in cardiac arrest event in pre-hospital setting. Background Nursing is projected in the future, developing a patient centred approach consistent with the values, needs and desires of patients, considering process of care as a complex intervention. Simulation based on scenarios is an opportunity to recreate this complexity in a virtual way, to develop the non-technical skills. Methods This study uses an inductive, interpretative and constructivist qualitative research. 7 nurses were interviewed. It was developed a thematic analysis content. Results Three themes were identified: Simulation scenarios in pre-hospital emergencies; The acquisition of knowledge to skills development and Construction of the virtual from the real Conclusions The interviewed nurses present weakness of knowledge about simulation types. Debriefing is relevant to the learning skills: critical thinking. thinking, clinical judgement and decision making.Resumo - Compreender a importância que os enfermeiros atribuem à simulação no desenvolvimento de competências não técnicas no evento paragem cardíaca em ambiente préhospitalar. Enquadramento A enfermagem é projetada no futuro, desenvolvendo uma abordagem centrada na pessoa consistente com a valorização de valores, necessidades e desejos destes, considerando o processo de cuidados como intervenção complexa. A simulação baseada em cenários é uma oportunidade para recriar essa complexidade de forma virtual, no desenvolvimento de competências não-técnicas. Metodologia Este estudo utiliza uma pesquisa qualitativa indutiva, interpretativa e construtivista. Foram entrevistados 7 enfermeiros. Foi desenvolvida análise de conteúdo temática. Resultados Foram identificados três temas: cenários de simulação em emergências pré-hospitalares; A aquisição de conhecimento para o desenvolvimento de habilidades e Construção do virtual a partir do real. Conclusões Os enfermeiros entrevistados apresentam conhecimentos a melhorar em relação aos tipos de simulação. Consideram o Debriefing relevante para as habilidades de aprendizagem: pensamento crítico, julgamento clínico e a tomada de decisão.Resumen - Comprender la importancia que los enfermeros atribuyen a la simulación en el desarrollo de competencias no técnicas en el evento paro cardíaco en ambiente prehospitalario. Background La enfermería se proyecta en el futuro, desarrollando un enfoque centrado en la persona consistente con la valorización de valores, necesidades y deseos de éstos, considerando el proceso de cuidar como intervención compleja. La simulación basada en escenarios es una oportunidad para recrear esta complejidad de forma virtual, en el desarrollo de competencias no técnicas. Metodología Este estudio utiliza una investigación cualitativa inductiva, interpretativa y constructivista. Se entrevistaron a 7 enfermeros. Se desarrolló un análisis de contenido temático. Resultados Se identificaron tres temas: escenarios de simulación en emergencias prehospitalarias; La adquisición de conocimiento para el desarrollo de habilidades y la construcción del virtual a partir del real. Conclusiones Los enfermeros entrevistados presentan conocimientos a mejorar en relación a los tipos de simulación. El Debriefing es considerado como relevante para las habilidades de aprendizaje: el pensamiento crítico, el juicio clínico y la toma de decisiones.info:eu-repo/semantics/publishedVersio

Persona-Driven Information Security Awareness

Because human factors are a root cause of security breaches in many organisations, security awareness activities are often used to address problematic behaviours and improve security culture. Previous work has found that personas are useful for identifying audience needs & goals when designing and implementing awareness campaigns. We present a six-step security awareness process both driven by and centred around the use of personas. This can be embedded into business-as-usual activities, with 90-day cycles of awareness themes. We evaluated this process by using it to devise a security awareness campaign for a digital agency. Our results suggest a persona-centred security awareness approach is adaptable to business constraints, and contributes towards addressing security risks