Contemplating Blame in Cyber Security

Publications

Contemplating Blame in Cyber Security

Karen Renaud, Alfred Musarurwa, Verena Zimmermann

well-consent

Abstract

Cyber breaches continue to occur, powered by a global cyber-crime contingent. Some crimes are carried out by malicious insiders, but in many cases the breach is facilitated by an interplay of technical vulnerabilities and human errors. Cyber criminals might exploit a failure to install updates or poor configuration or deceive people into clicking on a link or opening an attachment. Here, we highlight a blaming tendency when such adverse incidents occur. We will explore the advisability of blaming, contemplate the considerations that come into play if blaming is deemed appropriate, and consider the consequences for the “culprit”. Having revealed the destructiveness and unhelpfulness of blaming, we propose a “blamefree” way of responding to these kinds of events on the human level.
Link to Paper