Accepting PhD Students.

I'm a Reader in Cybersecurity and Resilience in the Department of Cybersecurity and Computing where I teach various security-related topics at undergraduate and postgraduate level, including security in software engineering, information security management, and human aspects of security.

My research focuses on all levels of cybersecurity from individual to national level. I'm particularly interested in management and human aspects of security. To date I have supervised 70+ postgraduate research projects to completion.

Module leader: Software Engineering Practice (CMP307); Engineering Resilient Systems (CMP417, CMP510); Understanding the Cybersecurity Threat (CYB393)

My research focuses primarily on information and cybersecurity. This includes a broad range of topics ranging from technical implementations, to management, and behavioural factors. Individuals are often considered to be the weakest link in security and I have a particular interest in human factors in (also called behavioural) security. Current problems I’m investigating are how to motivate secure behaviours in individuals and organisations, and understanding resistance to security recommendations. I also have an interest in the related area of information privacy.

I'm Vice-Chair of IFIP Working Group 11.8, which focuses on information security education. I hold an Honorary Research Associate position at the University of Cape Town, South Africa (2020-present). I was the SICSA Cyber Security research theme co-lead (2021-2025). I'm an Associate Editor for the Journal of Intellectual Capital (Securing the Organization's Knowledge and Information).