{"id":"https://openalex.org/W3088431595","doi":"https://doi.org/10.1145/3419101","title":"\u201cSo if Mr Blue Head here clicks the link...\u201d Risk Thinking in Cyber Security Decision Making","display_name":"\u201cSo if Mr Blue Head here clicks the link...\u201d Risk Thinking in Cyber Security Decision Making","publication_year":2020,"publication_date":"2020-11-08","ids":{"openalex":"https://openalex.org/W3088431595","doi":"https://doi.org/10.1145/3419101","mag":"3088431595"},"language":"en","primary_location":{"id":"doi:10.1145/3419101","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3419101","pdf_url":null,"source":{"id":"https://openalex.org/S4210174050","display_name":"ACM Transactions on Privacy and Security","issn_l":"2471-2566","issn":["2471-2566","2471-2574"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Privacy and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://research-information.bris.ac.uk/files/250938036/Shreeve_et_al._So_if_Mr_Bluehead.....pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5018454584","display_name":"Benjamin Shreeve","orcid":"https://orcid.org/0000-0002-9329-4866"},"institutions":[{"id":"https://openalex.org/I36234482","display_name":"University of Bristol","ror":"https://ror.org/0524sp257","country_code":"GB","type":"education","lineage":["https://openalex.org/I36234482"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Benjamin Shreeve","raw_affiliation_strings":["University of Bristol, UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Bristol, UK","institution_ids":["https://openalex.org/I36234482"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5015643745","display_name":"Joseph Hallett","orcid":"https://orcid.org/0000-0002-6146-9852"},"institutions":[{"id":"https://openalex.org/I36234482","display_name":"University of Bristol","ror":"https://ror.org/0524sp257","country_code":"GB","type":"education","lineage":["https://openalex.org/I36234482"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Joseph Hallett","raw_affiliation_strings":["University of Bristol, UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Bristol, UK","institution_ids":["https://openalex.org/I36234482"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5003587835","display_name":"Matthew Edwards","orcid":"https://orcid.org/0000-0001-8099-0646"},"institutions":[{"id":"https://openalex.org/I36234482","display_name":"University of Bristol","ror":"https://ror.org/0524sp257","country_code":"GB","type":"education","lineage":["https://openalex.org/I36234482"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Matthew Edwards","raw_affiliation_strings":["University of Bristol, UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Bristol, UK","institution_ids":["https://openalex.org/I36234482"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5077892743","display_name":"Pauline Anthonysamy","orcid":null},"institutions":[{"id":"https://openalex.org/I4210100430","display_name":"Google (Switzerland)","ror":"https://ror.org/014f9c269","country_code":"CH","type":"company","lineage":["https://openalex.org/I1291425158","https://openalex.org/I4210100430","https://openalex.org/I4210128969"]}],"countries":["CH"],"is_corresponding":false,"raw_author_name":"Pauline Anthonysamy","raw_affiliation_strings":["Google, Switzerland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Google, Switzerland","institution_ids":["https://openalex.org/I4210100430"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5056668578","display_name":"Sylvain Frey","orcid":"https://orcid.org/0000-0003-2551-7455"},"institutions":[{"id":"https://openalex.org/I4210100430","display_name":"Google (Switzerland)","ror":"https://ror.org/014f9c269","country_code":"CH","type":"company","lineage":["https://openalex.org/I1291425158","https://openalex.org/I4210100430","https://openalex.org/I4210128969"]}],"countries":["CH"],"is_corresponding":false,"raw_author_name":"Sylvain Frey","raw_affiliation_strings":["Google, Switzerland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Google, Switzerland","institution_ids":["https://openalex.org/I4210100430"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5034962802","display_name":"Awais Rashid","orcid":"https://orcid.org/0000-0002-0109-1341"},"institutions":[{"id":"https://openalex.org/I36234482","display_name":"University of Bristol","ror":"https://ror.org/0524sp257","country_code":"GB","type":"education","lineage":["https://openalex.org/I36234482"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Awais Rashid","raw_affiliation_strings":["University of Bristol, UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Bristol, UK","institution_ids":["https://openalex.org/I36234482"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.9028,"has_fulltext":true,"cited_by_count":14,"citation_normalized_percentile":{"value":0.89545351,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":99},"biblio":{"volume":"24","issue":"1","first_page":"1","last_page":"29"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12519","display_name":"Cybercrime and Law Enforcement Studies","score":0.9685999751091003,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.630199670791626},{"id":"https://openalex.org/keywords/risk-analysis","display_name":"Risk analysis (engineering)","score":0.4859544038772583},{"id":"https://openalex.org/keywords/multitude","display_name":"Multitude","score":0.46283435821533203},{"id":"https://openalex.org/keywords/work","display_name":"Work (physics)","score":0.4622736871242523},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.43182846903800964},{"id":"https://openalex.org/keywords/risk-assessment","display_name":"Risk assessment","score":0.41837361454963684},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4122235178947449},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.2828938961029053},{"id":"https://openalex.org/keywords/political-science","display_name":"Political science","score":0.1694369912147522},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.13931968808174133}],"concepts":[{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.630199670791626},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.4859544038772583},{"id":"https://openalex.org/C2780565519","wikidata":"https://www.wikidata.org/wiki/Q1208937","display_name":"Multitude","level":2,"score":0.46283435821533203},{"id":"https://openalex.org/C18762648","wikidata":"https://www.wikidata.org/wiki/Q42213","display_name":"Work (physics)","level":2,"score":0.4622736871242523},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.43182846903800964},{"id":"https://openalex.org/C12174686","wikidata":"https://www.wikidata.org/wiki/Q1058438","display_name":"Risk assessment","level":2,"score":0.41837361454963684},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4122235178947449},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.2828938961029053},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.1694369912147522},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.13931968808174133},{"id":"https://openalex.org/C78519656","wikidata":"https://www.wikidata.org/wiki/Q101333","display_name":"Mechanical engineering","level":1,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3419101","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3419101","pdf_url":null,"source":{"id":"https://openalex.org/S4210174050","display_name":"ACM Transactions on Privacy and Security","issn_l":"2471-2566","issn":["2471-2566","2471-2574"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Privacy and Security","raw_type":"journal-article"},{"id":"pmh:oai:research-information.bris.ac.uk:openaire/ea312355-5f36-493d-9d21-eda3d66f82d1","is_oa":true,"landing_page_url":"https://research-information.bris.ac.uk/en/publications/ea312355-5f36-493d-9d21-eda3d66f82d1","pdf_url":"https://research-information.bris.ac.uk/files/250938036/Shreeve_et_al._So_if_Mr_Bluehead.....pdf","source":{"id":"https://openalex.org/S4306400895","display_name":"Bristol Research (University of Bristol)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I36234482","host_organization_name":"University of Bristol","host_organization_lineage":["https://openalex.org/I36234482"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Shreeve, B, Hallett, J, Edwards, M, Anthonysamy, P, Frey, S & Rashid, A 2020, '\"So if Mr Blue Head here clicks the link...\" : Risk thinking in cyber security decision making', ACM Transactions on Privacy and Security, vol. 24, no. 1, 5. https://doi.org/10.1145/3419101","raw_type":"info:eu-repo/semantics/article"}],"best_oa_location":{"id":"pmh:oai:research-information.bris.ac.uk:openaire/ea312355-5f36-493d-9d21-eda3d66f82d1","is_oa":true,"landing_page_url":"https://research-information.bris.ac.uk/en/publications/ea312355-5f36-493d-9d21-eda3d66f82d1","pdf_url":"https://research-information.bris.ac.uk/files/250938036/Shreeve_et_al._So_if_Mr_Bluehead.....pdf","source":{"id":"https://openalex.org/S4306400895","display_name":"Bristol Research (University of Bristol)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I36234482","host_organization_name":"University of Bristol","host_organization_lineage":["https://openalex.org/I36234482"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Shreeve, B, Hallett, J, Edwards, M, Anthonysamy, P, Frey, S & Rashid, A 2020, '\"So if Mr Blue Head here clicks the link...\" : Risk thinking in cyber security decision making', ACM Transactions on Privacy and Security, vol. 24, no. 1, 5. https://doi.org/10.1145/3419101","raw_type":"info:eu-repo/semantics/article"},"sustainable_development_goals":[{"score":0.7799999713897705,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[{"id":"https://openalex.org/G188845834","display_name":null,"funder_award_id":"EP/N021657/1","funder_id":"https://openalex.org/F4320334627","funder_display_name":"Engineering and Physical Sciences Research Council"},{"id":"https://openalex.org/G261494424","display_name":null,"funder_award_id":"EP/N021657/2","funder_id":"https://openalex.org/F4320334627","funder_display_name":"Engineering and Physical Sciences Research Council"},{"id":"https://openalex.org/G2935026176","display_name":"MUMBA: Multi-faceted Metrics for ICS Business Risk Analysis","funder_award_id":"EP/M002780/1","funder_id":"https://openalex.org/F4320334627","funder_display_name":"Engineering and Physical Sciences Research Council"},{"id":"https://openalex.org/G4427983816","display_name":null,"funder_award_id":"EP/M002780/1","funder_id":"https://openalex.org/F4320334627","funder_display_name":"Engineering and Physical Sciences Research Council"},{"id":"https://openalex.org/G8155597329","display_name":"DYPOSIT: Dynamic Policies for Shared Cyber-Physical Infrastructures under Attack","funder_award_id":"EP/N021657/2","funder_id":"https://openalex.org/F4320334627","funder_display_name":"Engineering and Physical Sciences Research Council"}],"funders":[{"id":"https://openalex.org/F4320334627","display_name":"Engineering and Physical Sciences Research Council","ror":"https://ror.org/0439y7842"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3088431595.pdf","grobid_xml":"https://content.openalex.org/works/W3088431595.grobid-xml"},"referenced_works_count":49,"referenced_works":["https://openalex.org/W69643952","https://openalex.org/W110993677","https://openalex.org/W201578715","https://openalex.org/W228931970","https://openalex.org/W1530307360","https://openalex.org/W1583757370","https://openalex.org/W1603321039","https://openalex.org/W1996494404","https://openalex.org/W1998165099","https://openalex.org/W2011854722","https://openalex.org/W2028907687","https://openalex.org/W2029827226","https://openalex.org/W2031587383","https://openalex.org/W2042017898","https://openalex.org/W2047074192","https://openalex.org/W2056075452","https://openalex.org/W2074206567","https://openalex.org/W2075932477","https://openalex.org/W2091069417","https://openalex.org/W2091939813","https://openalex.org/W2094710333","https://openalex.org/W2094908256","https://openalex.org/W2100989171","https://openalex.org/W2102144719","https://openalex.org/W2103756065","https://openalex.org/W2106298969","https://openalex.org/W2119587968","https://openalex.org/W2133402043","https://openalex.org/W2139810625","https://openalex.org/W2164321713","https://openalex.org/W2166847400","https://openalex.org/W2167474990","https://openalex.org/W2169681803","https://openalex.org/W2241864412","https://openalex.org/W2268892336","https://openalex.org/W2489007269","https://openalex.org/W2560532904","https://openalex.org/W2739892046","https://openalex.org/W2772118528","https://openalex.org/W2797597138","https://openalex.org/W2888958462","https://openalex.org/W2889148637","https://openalex.org/W2889482448","https://openalex.org/W2940578872","https://openalex.org/W3122424966","https://openalex.org/W3156401791","https://openalex.org/W4230665532","https://openalex.org/W4230787006","https://openalex.org/W4237389007"],"related_works":["https://openalex.org/W2162350346","https://openalex.org/W2417158417","https://openalex.org/W3138050359","https://openalex.org/W2085558045","https://openalex.org/W4210784828","https://openalex.org/W2013166250","https://openalex.org/W2946634840","https://openalex.org/W2967550622","https://openalex.org/W51752556","https://openalex.org/W3193040745"],"abstract_inverted_index":{"Cyber":[0],"security":[1,32,42,58,107],"decision":[2,10,71,152,159],"making":[3,160],"is":[4,21,68,161],"inherently":[5],"complicated,":[6],"with":[7,53],"nearly":[8],"every":[9],"having":[11],"knock-on":[12],"consequences":[13],"for":[14,77],"an":[15,37,98],"organisation\u2019s":[16],"vulnerability":[17],"and":[18,34,83,118,123,139,176,180],"exposure.":[19],"This":[20,66],"further":[22],"compounded":[23],"by":[24,70,93,134,163],"the":[25,41,44,88,135,164,169],"fact":[26],"that":[27,43,60,129,158],"decision-making":[28],"actors":[29],"are":[30,142],"rarely":[31],"experts":[33],"may":[35,62],"have":[36],"incomplete":[38],"understanding":[39],"of":[40,56,95,115,137,166],"organisation":[45],"currently":[46],"has":[47],"in":[48,97],"place.":[49],"They":[50],"must":[51],"contend":[52],"a":[54,103],"multitude":[55],"possible":[57],"options":[59],"they":[61],"only":[63],"partially":[64],"understand.":[65],"challenge":[67],"met":[69],"makers\u2019":[72],"risk":[73,89,116],"thinking":[74,90,117],"\u2014their":[75],"strategies":[76,91],"identifying":[78],"risks,":[79],"assessing":[80],"their":[81],"severity,":[82],"prioritising":[84],"responses.":[85],"We":[86],"study":[87],"employed":[92],"teams":[94],"participants":[96],"existing":[99],"dataset":[100],"derived":[101],"from":[102],"tabletop":[104],"cyber-physical":[105],"systems":[106],"game.":[108],"Our":[109,126],"analysis":[110,156],"identifies":[111],"four":[112],"structural":[113],"patterns":[114],"two":[119],"reasoning":[120],"strategies:":[121],"risk-first":[122,130,179],"opportunity-first":[124,181],".":[125],"work":[127],"highlights":[128],"approaches":[131],"(as":[132],"prescribed":[133],"likes":[136],"NIST-800-53":[138],"ISO":[140],"27001)":[141],"followed":[143],"neither":[144],"substantially":[145],"nor":[146],"exclusively":[147],"when":[148],"it":[149],"comes":[150],"to":[151,171],"making.":[153],"Instead,":[154],"our":[155],"finds":[157],"affected":[162],"plasticity":[165],"teams\u2014that":[167],"is,":[168],"ability":[170],"readily":[172],"switch":[173],"between":[174],"ideas":[175],"practising":[177],"both":[178],"reasoning.":[182]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":6},{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":4},{"year":2021,"cited_by_count":2}],"updated_date":"2026-07-02T09:51:11.867554","created_date":"2025-10-10T00:00:00"}