Individual preferences in security risk decision making

Individual preferences in security risk decision making: an exploratory study under security professionals

de Wit, J.J. (TU Delft Safety and Security Science)
Pieters, W. (Radboud Universiteit Nijmegen)
van Gelder, P.H.A.J.M. (TU Delft Safety and Security Science)

Passerini, Giorgio (editor)
Garzia, Fabio (editor)
Lombardi, Mara (editor)

2021

Risk assessments in the (cyber) security domain are often, if not always, based on subjective expert judgement. For the first time, to the best of our knowledge, the individual preferences of professionals from the security domain are studied. In on online survey they are asked to mention, rate and rank their preferences when assessing a security risk. The survey setup allows to differentiate between easily accessible or “on top of mind” attributes and guided or stimulated attributes. The security professionals are also challenged to both non-compensatory and compensatory decision making on the relevance of the attributes. The results of this explorative study indicate a clear difference and shift in the individual perceived relevance of attributes in these different settings. Another remarkable finding of this study is the predominant focus on impact attributes by the respondents and the less significant position of likelihood or probability. The majority of professionals seem to ignore likelihood in their security risk assessment. This might be due to so called probability neglect as introduced by other scholars. the security in organisations and society is depending on the assessment and judgement of these professionals, understanding their preferences and the influence of cognitive biases is paramount. This study contributes to this body of knowledge and might raise attention to this important topic in both the academic and professional security domain.

Decision biases
Decision making
Preferences
Probability neglect
Risk management
Security risk assessment

http://resolver.tudelft.nl/uuid:80869fba-ac38-4d79-9f70-52ed669a9a5b

https://doi.org/10.2495/SAFE210161

WITPress

978-178466443-5

Safety and Security Engineering IX, 206

9th International Conference on Safety and Security Engineering, SAFE 2021, 2021-11-09 → 2021-11-11, Virtual, Online, Italy

WIT Transactions on the Built Environment, 1743-3509, 206

Institutional Repository

conference paper

© 2021 J.J. de Wit, W. Pieters, P.H.A.J.M. van Gelder