Preparing for GDPR

helping EU SMEs to manage data breaches

Research output: Chapter in Book/Report/Conference proceedingConference contribution

238 Downloads (Pure)

Abstract

Over the last decade, the number of small and medium (SME) businesses suffering data breaches has risen at an alarming rate. Knowing how to respond to inevitable data breaches is critically important. A number of guidelines exist to advise organisations on the steps necessary to ensure an effective incident response. These guidelines tend to be unsuitable for SMEs, who generally have limited resources to expend on security and incident responses. Qualitative interviews were conducted with SMEs to probe current data breach response practice and to gather best-practice advice from SMEs themselves. The interviews revealed no widespread de facto approach, with a variety of practices being reported. A number of prevalent unhelpful-practice themes emerged from the responses, which we propose specific mitigation techniques to address. We therefore propose a SME-specific incident response framework that is simple yet powerful enough to inform and guide SME responses to data breach incidents.
Original languageEnglish
Title of host publicationAISB 2018
Subtitle of host publicationSymposium on Digital Behaviour Interventions for Cyber-Security
PublisherSociety for the Study of Artificial Intelligence and Simulation for Behaviour (AISB)
Pages13-20
Number of pages8
Publication statusPublished - 5 Apr 2018
Event2018 AISB Convention: Symposium on Digital Behaviour Intervention for Cyber Security - University of Liverpool, Liverpool, United Kingdom
Duration: 4 Apr 20186 Apr 2018
https://www.sspedi.co.uk/aisb2018

Other

Other2018 AISB Convention
CountryUnited Kingdom
CityLiverpool
Period4/04/186/04/18
Internet address

Fingerprint

mitigation
probe
resource
advice
rate

Cite this

Kapoor, K., Renaud, K., & Archibald, J. (2018). Preparing for GDPR: helping EU SMEs to manage data breaches. In AISB 2018: Symposium on Digital Behaviour Interventions for Cyber-Security (pp. 13-20). Society for the Study of Artificial Intelligence and Simulation for Behaviour (AISB).
Kapoor, Keshav ; Renaud, Karen ; Archibald, Jacqueline. / Preparing for GDPR : helping EU SMEs to manage data breaches. AISB 2018: Symposium on Digital Behaviour Interventions for Cyber-Security. Society for the Study of Artificial Intelligence and Simulation for Behaviour (AISB), 2018. pp. 13-20
@inproceedings{8b761aafc2d541a698bf2b7daa33ea93,
title = "Preparing for GDPR: helping EU SMEs to manage data breaches",
abstract = "Over the last decade, the number of small and medium (SME) businesses suffering data breaches has risen at an alarming rate. Knowing how to respond to inevitable data breaches is critically important. A number of guidelines exist to advise organisations on the steps necessary to ensure an effective incident response. These guidelines tend to be unsuitable for SMEs, who generally have limited resources to expend on security and incident responses. Qualitative interviews were conducted with SMEs to probe current data breach response practice and to gather best-practice advice from SMEs themselves. The interviews revealed no widespread de facto approach, with a variety of practices being reported. A number of prevalent unhelpful-practice themes emerged from the responses, which we propose specific mitigation techniques to address. We therefore propose a SME-specific incident response framework that is simple yet powerful enough to inform and guide SME responses to data breach incidents.",
author = "Keshav Kapoor and Karen Renaud and Jacqueline Archibald",
year = "2018",
month = "4",
day = "5",
language = "English",
pages = "13--20",
booktitle = "AISB 2018",
publisher = "Society for the Study of Artificial Intelligence and Simulation for Behaviour (AISB)",

}

Kapoor, K, Renaud, K & Archibald, J 2018, Preparing for GDPR: helping EU SMEs to manage data breaches. in AISB 2018: Symposium on Digital Behaviour Interventions for Cyber-Security. Society for the Study of Artificial Intelligence and Simulation for Behaviour (AISB), pp. 13-20, 2018 AISB Convention, Liverpool, United Kingdom, 4/04/18.

Preparing for GDPR : helping EU SMEs to manage data breaches. / Kapoor, Keshav; Renaud, Karen; Archibald, Jacqueline.

AISB 2018: Symposium on Digital Behaviour Interventions for Cyber-Security. Society for the Study of Artificial Intelligence and Simulation for Behaviour (AISB), 2018. p. 13-20.

Research output: Chapter in Book/Report/Conference proceedingConference contribution

TY - GEN

T1 - Preparing for GDPR

T2 - helping EU SMEs to manage data breaches

AU - Kapoor, Keshav

AU - Renaud, Karen

AU - Archibald, Jacqueline

PY - 2018/4/5

Y1 - 2018/4/5

N2 - Over the last decade, the number of small and medium (SME) businesses suffering data breaches has risen at an alarming rate. Knowing how to respond to inevitable data breaches is critically important. A number of guidelines exist to advise organisations on the steps necessary to ensure an effective incident response. These guidelines tend to be unsuitable for SMEs, who generally have limited resources to expend on security and incident responses. Qualitative interviews were conducted with SMEs to probe current data breach response practice and to gather best-practice advice from SMEs themselves. The interviews revealed no widespread de facto approach, with a variety of practices being reported. A number of prevalent unhelpful-practice themes emerged from the responses, which we propose specific mitigation techniques to address. We therefore propose a SME-specific incident response framework that is simple yet powerful enough to inform and guide SME responses to data breach incidents.

AB - Over the last decade, the number of small and medium (SME) businesses suffering data breaches has risen at an alarming rate. Knowing how to respond to inevitable data breaches is critically important. A number of guidelines exist to advise organisations on the steps necessary to ensure an effective incident response. These guidelines tend to be unsuitable for SMEs, who generally have limited resources to expend on security and incident responses. Qualitative interviews were conducted with SMEs to probe current data breach response practice and to gather best-practice advice from SMEs themselves. The interviews revealed no widespread de facto approach, with a variety of practices being reported. A number of prevalent unhelpful-practice themes emerged from the responses, which we propose specific mitigation techniques to address. We therefore propose a SME-specific incident response framework that is simple yet powerful enough to inform and guide SME responses to data breach incidents.

M3 - Conference contribution

SP - 13

EP - 20

BT - AISB 2018

PB - Society for the Study of Artificial Intelligence and Simulation for Behaviour (AISB)

ER -

Kapoor K, Renaud K, Archibald J. Preparing for GDPR: helping EU SMEs to manage data breaches. In AISB 2018: Symposium on Digital Behaviour Interventions for Cyber-Security. Society for the Study of Artificial Intelligence and Simulation for Behaviour (AISB). 2018. p. 13-20