Designing Systems for Risk Based Decision Making.

Abstract

A common challenge security analysts face, is in making decisions on risk when facing uncertain conditions especially when risk management procedures are inapplicable. Though analysts may have experience and their intuition to depend upon, these have sometimes proven to be insufficient and it has also been identified that risk and uncertainty may be magnified by personal, system and environmental factors. Risk decision making is an integral part of security analysis, a role facilitated by system automation and design. However, designing for usable security has not sufficiently considered the implications of design to risk decision making and more so in relation to security analysts. The research aims to address this by coming up with recommendations for design, for risk based decision making.