Understanding factors that influence unintentional insider threat: A framework to counteract unintentional risks

The exploitation of individuals classified as insiders is widely acknowledged as a common avenue for cyberattacks. Recent research approaches this issue from various angles, covering aspects related to technology, psychology, and sociotechnical factors. This particular study delves deeper into the realm of unintentional insider threats, employing the Critical Decision Method (CDM) in interviews with individuals who have experienced inadvertent cybersecurity breaches. The study aims to identify significant factors within the context of everyday work settings. By employing CDM inquiries, the researchers gather expert insights into the decision-making processes that occurred before, during, and after breaches, all while participants are actively engaged in cognitive tasks. The analysis of the collected data yields emerging themes, including patterns of decision-making, factors related to tasks, occurrences of accidents, and the influence of organizational factors.