{"id":"https://openalex.org/W7154170149","doi":"https://doi.org/10.1145/3772318.3790613","title":"\u201cTell Them They Are a Responsible Entity, Not a Customer\u201d: Understanding Practitioner Challenges in Sector CSIRTs","display_name":"\u201cTell Them They Are a Responsible Entity, Not a Customer\u201d: Understanding Practitioner Challenges in Sector CSIRTs","publication_year":2026,"publication_date":"2026-04-13","ids":{"openalex":"https://openalex.org/W7154170149","doi":"https://doi.org/10.1145/3772318.3790613"},"language":null,"primary_location":{"id":"doi:10.1145/3772318.3790613","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3772318.3790613","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2026 CHI Conference on Human Factors in Computing Systems","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1145/3772318.3790613","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5120421370","display_name":"Aksel Ethembabaoglu","orcid":"https://orcid.org/0009-0005-5738-7458"},"institutions":[{"id":"https://openalex.org/I98358874","display_name":"Delft University of Technology","ror":"https://ror.org/02e2c7k09","country_code":"NL","type":"education","lineage":["https://openalex.org/I98358874"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Aksel Ethembabaoglu","raw_affiliation_strings":["Delft University of Technology, Delft, Netherlands"],"raw_orcid":"https://orcid.org/0009-0005-5738-7458","affiliations":[{"raw_affiliation_string":"Delft University of Technology, Delft, Netherlands","institution_ids":["https://openalex.org/I98358874"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5037666673","display_name":"Natalia Kadenko","orcid":"https://orcid.org/0000-0001-8831-6744"},"institutions":[{"id":"https://openalex.org/I98358874","display_name":"Delft University of Technology","ror":"https://ror.org/02e2c7k09","country_code":"NL","type":"education","lineage":["https://openalex.org/I98358874"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Natalia I. Kadenko","raw_affiliation_strings":["National Cyber Security Center (NCSC), The Hague, Netherlands and Delft University of Technology, Delft, Netherlands"],"raw_orcid":"https://orcid.org/0000-0001-8831-6744","affiliations":[{"raw_affiliation_string":"National Cyber Security Center (NCSC), The Hague, Netherlands and Delft University of Technology, Delft, Netherlands","institution_ids":["https://openalex.org/I98358874"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5120467834","display_name":"Yana Angelova","orcid":null},"institutions":[{"id":"https://openalex.org/I98358874","display_name":"Delft University of Technology","ror":"https://ror.org/02e2c7k09","country_code":"NL","type":"education","lineage":["https://openalex.org/I98358874"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Yana Angelova","raw_affiliation_strings":["Delft University of Technology, Delft, Netherlands"],"raw_orcid":"https://orcid.org/0009-0001-3068-8438","affiliations":[{"raw_affiliation_string":"Delft University of Technology, Delft, Netherlands","institution_ids":["https://openalex.org/I98358874"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5000936454","display_name":"Yury Zhauniarovich","orcid":"https://orcid.org/0000-0001-9116-0728"},"institutions":[{"id":"https://openalex.org/I98358874","display_name":"Delft University of Technology","ror":"https://ror.org/02e2c7k09","country_code":"NL","type":"education","lineage":["https://openalex.org/I98358874"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Yury Zhauniarovich","raw_affiliation_strings":["Delft University of Technology, Delft, Netherlands"],"raw_orcid":"https://orcid.org/0000-0001-9116-0728","affiliations":[{"raw_affiliation_string":"Delft University of Technology, Delft, Netherlands","institution_ids":["https://openalex.org/I98358874"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5133535681","display_name":"Rolf van Wegberg","orcid":"https://orcid.org/0009-0004-1491-9867"},"institutions":[{"id":"https://openalex.org/I98358874","display_name":"Delft University of Technology","ror":"https://ror.org/02e2c7k09","country_code":"NL","type":"education","lineage":["https://openalex.org/I98358874"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Rolf van Wegberg","raw_affiliation_strings":["Delft University of Technology, Delft, Netherlands"],"raw_orcid":"https://orcid.org/0009-0004-1491-9867","affiliations":[{"raw_affiliation_string":"Delft University of Technology, Delft, Netherlands","institution_ids":["https://openalex.org/I98358874"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5016771481","display_name":"Simon Parkin","orcid":"https://orcid.org/0000-0002-6667-0440"},"institutions":[{"id":"https://openalex.org/I98358874","display_name":"Delft University of Technology","ror":"https://ror.org/02e2c7k09","country_code":"NL","type":"education","lineage":["https://openalex.org/I98358874"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Simon Parkin","raw_affiliation_strings":["Delft University of Technology, Delft, Netherlands"],"raw_orcid":"https://orcid.org/0000-0002-6667-0440","affiliations":[{"raw_affiliation_string":"Delft University of Technology, Delft, Netherlands","institution_ids":["https://openalex.org/I98358874"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5012946294","display_name":"Michel van Eeten","orcid":"https://orcid.org/0000-0002-0338-2812"},"institutions":[{"id":"https://openalex.org/I98358874","display_name":"Delft University of Technology","ror":"https://ror.org/02e2c7k09","country_code":"NL","type":"education","lineage":["https://openalex.org/I98358874"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Michel van Eeten","raw_affiliation_strings":["Delft University of Technology, Delft, Netherlands"],"raw_orcid":"https://orcid.org/0000-0002-0338-2812","affiliations":[{"raw_affiliation_string":"Delft University of Technology, Delft, Netherlands","institution_ids":["https://openalex.org/I98358874"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I98358874"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.36369242,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"23"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.604200005531311,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.604200005531311,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12221","display_name":"Cybersecurity and Cyber Warfare Studies","score":0.22499999403953552,"subfield":{"id":"https://openalex.org/subfields/3320","display_name":"Political Science and International Relations"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T12572","display_name":"Intelligence, Security, War Strategy","score":0.014999999664723873,"subfield":{"id":"https://openalex.org/subfields/3320","display_name":"Political Science and International Relations"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.6348000168800354},{"id":"https://openalex.org/keywords/information-security","display_name":"Information security","score":0.4440999925136566},{"id":"https://openalex.org/keywords/public-sector","display_name":"Public sector","score":0.4352000057697296},{"id":"https://openalex.org/keywords/best-practice","display_name":"Best practice","score":0.4325999915599823},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.42010000348091125},{"id":"https://openalex.org/keywords/data-breach","display_name":"Data breach","score":0.3325999975204468},{"id":"https://openalex.org/keywords/core","display_name":"Core (optical fiber)","score":0.3174000084400177},{"id":"https://openalex.org/keywords/information-technology","display_name":"Information technology","score":0.3095000088214874}],"concepts":[{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.6348000168800354},{"id":"https://openalex.org/C39549134","wikidata":"https://www.wikidata.org/wiki/Q133080","display_name":"Public relations","level":1,"score":0.6244999766349792},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.5357999801635742},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.4440999925136566},{"id":"https://openalex.org/C147859227","wikidata":"https://www.wikidata.org/wiki/Q294217","display_name":"Public sector","level":2,"score":0.4352000057697296},{"id":"https://openalex.org/C184356942","wikidata":"https://www.wikidata.org/wiki/Q830382","display_name":"Best practice","level":2,"score":0.4325999915599823},{"id":"https://openalex.org/C56739046","wikidata":"https://www.wikidata.org/wiki/Q192060","display_name":"Knowledge management","level":1,"score":0.4235000014305115},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.42010000348091125},{"id":"https://openalex.org/C165609540","wikidata":"https://www.wikidata.org/wiki/Q1172486","display_name":"Data breach","level":2,"score":0.3325999975204468},{"id":"https://openalex.org/C2164484","wikidata":"https://www.wikidata.org/wiki/Q5170150","display_name":"Core (optical fiber)","level":2,"score":0.3174000084400177},{"id":"https://openalex.org/C121017731","wikidata":"https://www.wikidata.org/wiki/Q11661","display_name":"Information technology","level":2,"score":0.3095000088214874},{"id":"https://openalex.org/C10511746","wikidata":"https://www.wikidata.org/wiki/Q899388","display_name":"Data security","level":3,"score":0.30059999227523804},{"id":"https://openalex.org/C2778137410","wikidata":"https://www.wikidata.org/wiki/Q2732820","display_name":"Government (linguistics)","level":2,"score":0.28619998693466187},{"id":"https://openalex.org/C505623098","wikidata":"https://www.wikidata.org/wiki/Q3002932","display_name":"Critical security studies","level":5,"score":0.2669000029563904},{"id":"https://openalex.org/C137757676","wikidata":"https://www.wikidata.org/wiki/Q3477367","display_name":"Business sector","level":2,"score":0.26669999957084656},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.266400009393692},{"id":"https://openalex.org/C2776855904","wikidata":"https://www.wikidata.org/wiki/Q571595","display_name":"Security sector reform","level":3,"score":0.26249998807907104},{"id":"https://openalex.org/C180823521","wikidata":"https://www.wikidata.org/wiki/Q1662502","display_name":"Certified Information Security Manager","level":5,"score":0.258899986743927},{"id":"https://openalex.org/C180198813","wikidata":"https://www.wikidata.org/wiki/Q121182","display_name":"Information system","level":2,"score":0.25600001215934753},{"id":"https://openalex.org/C121426985","wikidata":"https://www.wikidata.org/wiki/Q591763","display_name":"Private sector","level":2,"score":0.25519999861717224},{"id":"https://openalex.org/C18762648","wikidata":"https://www.wikidata.org/wiki/Q42213","display_name":"Work (physics)","level":2,"score":0.2515999972820282}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3772318.3790613","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3772318.3790613","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2026 CHI Conference on Human Factors in Computing Systems","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3772318.3790613","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3772318.3790613","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2026 CHI Conference on Human Factors in Computing Systems","raw_type":"proceedings-article"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.5282378792762756}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":39,"referenced_works":["https://openalex.org/W1494756088","https://openalex.org/W1520887344","https://openalex.org/W1999627326","https://openalex.org/W2033743103","https://openalex.org/W2060678717","https://openalex.org/W2112736324","https://openalex.org/W2113156617","https://openalex.org/W2170135113","https://openalex.org/W2336148134","https://openalex.org/W2341612996","https://openalex.org/W2405187615","https://openalex.org/W2420107722","https://openalex.org/W2564160651","https://openalex.org/W2564812877","https://openalex.org/W2587096864","https://openalex.org/W2726869989","https://openalex.org/W2899061406","https://openalex.org/W2986291326","https://openalex.org/W2990991430","https://openalex.org/W3017863658","https://openalex.org/W3048560297","https://openalex.org/W3206561781","https://openalex.org/W3209656933","https://openalex.org/W3214111360","https://openalex.org/W4244496119","https://openalex.org/W4297792532","https://openalex.org/W4318185007","https://openalex.org/W4376626867","https://openalex.org/W4384523732","https://openalex.org/W4387880650","https://openalex.org/W4391216431","https://openalex.org/W4395074842","https://openalex.org/W4401722399","https://openalex.org/W4402933478","https://openalex.org/W4407736351","https://openalex.org/W4409736031","https://openalex.org/W4409870979","https://openalex.org/W6922226066","https://openalex.org/W6959701095"],"related_works":[],"abstract_inverted_index":{"In":[0],"this":[1],"paper,":[2],"we":[3,42],"study":[4],"the":[5,25,35,55,125,140],"experiences":[6],"of":[7,129],"practitioners":[8],"in":[9,45,71,108,142],"sectoral":[10],"Computer":[11],"Security":[12],"Incident":[13],"Response":[14],"Teams":[15],"(CSIRTs)\u2014specialized":[16],"teams":[17],"that":[18,75],"mediate":[19],"between":[20],"national":[21],"cybersecurity":[22],"authorities":[23],"and":[24,68,92,118,135],"sector":[26,90,103,113,131],"constituency.":[27],"Through":[28],"interviews":[29,87],"with":[30,85,96,112,148],"18":[31],"professionals":[32,133,147],"connected":[33],"to":[34,146],"Informatiebeveiligingsdienst":[36],"(IBD-CSIRT)":[37],"for":[38],"Dutch":[39],"local":[40],"governments,":[41],"uncover":[43],"tensions":[44,141],"how":[46,130],"key":[47],"services":[48],"are":[49],"valued.":[50],"For":[51],"vulnerability":[52],"notifications,":[53],"while":[54],"CSIRT":[56,132],"staff":[57],"consider":[58],"them":[59],"a":[60,93],"core":[61],"service,":[62],"many":[63],"constituents":[64],"hardly":[65],"mention":[66],"them,":[67],"systemic":[69],"gaps":[70],"information":[72],"forwarding":[73],"mean":[74],"crucial":[76],"alerts":[77],"often":[78],"never":[79],"arrive.":[80],"We":[81],"extend":[82],"these":[83],"insights":[84],"5":[86],"across":[88],"other":[89],"CSIRTs":[91],"validation":[94],"workshop":[95],"7":[97],"participants,":[98],"all":[99],"security":[100,150],"officers":[101],"from":[102],"CSIRTs,":[104],"revealing":[105],"shared":[106],"challenges":[107],"balancing":[109],"technical":[110],"expertise":[111],"knowledge,":[114],"building":[115],"trust-based":[116],"relationships,":[117],"navigating":[119],"institutional":[120],"bottlenecks.":[121],"Our":[122],"findings":[123],"contribute":[124],"first":[126],"systematic":[127],"account":[128],"understand":[134],"perform":[136],"their":[137],"role,":[138],"highlighting":[139],"providing":[143],"sector-wide":[144],"support":[145],"differing":[149],"needs.":[151]},"counts_by_year":[],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2026-04-14T00:00:00"}