People & Security

Education Level: Basic

4215 - Cyber, Risk and Gender: Is There a White Male Effect in Cybersecurity?

Co-Speaker(s)

• 

  Stephen Cobb, CISSP, MSc

  Senior Security Resesarcher
  ESET
• 

  Lysa Myers

  Security Researcher III
  ESET

Accurate assessment of risk is vital for effective cybersecurity, yet numerous studies show that perceptions of risk vary considerably, between demographic groups and along gender lines. Leveraging established research in areas like cultural theory of risk perception, plus original research by the authors, this session presents evidence of a “white male effect” leading to underestimation of technology risks. Could this account for the persistent insecurity of digital product design? Does it undermine efforts to protect information systems from criminal abuse? Given that most cybersecurity professionals are males who tend to see more risk in technology than their peers, the researchers explore the causes of white male effect, then suggest strategies for countering its influence, such as increasing diversity in technology companies and the cybersecurity workforce.

Learning Objectives:

• Describe how the white male effect can negatively impact risk assessment in digital technology and information systems and cite examples.
• Describe ways to identify white male effect in product design, system architecture, employee behavior, security strategy and security awareness.
• Describe ways to counter, or compensate for, white male effect to reduce its negative impact on the organization's information system security.