Cybersecurity and privacy are system-level constraints that shape how digital technologies are designed, governed, adopted, and used. Most cybersecurity and privacy failures stem from complex sociotechnical interactions and continuously expanding attack surfaces. Human behavior, routines, incentives, and awareness intersect with distributed digital ecosystems, platform-based architectures, and supply-chain dependencies in ways that cannot be adequately explained by simple attacker–defender models or isolated compliance failures. These conditions raise fundamental questions about cyber-risk sensemaking, governance, and the design of effective systems of control in dynamic digital environments.

Track Chairs:
Burcu Bulgurcu, Toronto Metropolitan University, Canada
Saeed Akhlaghpou, The University of Queensland, Australia
Dionysios Demetis, Texas A&M University
Jason Thatcher, University of Colorado Boulder, United States

Schedule
2026
Monday, December 14th
12:00 AM

A Breach on the Resume: Organizational Data Breaches and IT Employees’ Subsequent Career Prospects

Luwei Xiang, University of Oklahoma
Heshan Sun, University of Oklahoma
Matthew Jensen, University of Oklahoma
Keehyung Kim, University of Oklahoma
Ting Xu, Southern University of Science and Technology

12:00 AM

Breakthrough or Breakdown? Firm-Level Generative AI Exposure and Data Breach Risk

Le Wang, School of Economics and Finance, Xi'an Jiaotong University
Xukai Huang, School of Economics and Finance, Xi'an Jiaotong University
Xin (Robert) Luo, University of New Mexico
Paul Benjamin Lowry, Virginia Tech
Chaofan Yang, Xi'an Jiaotong University

12:00 AM

Cyber-Safe Autonomous Drone Operations: An AI-specific Risk Assessment Framework

Paolo Spagnoletti, LUISS Guido Carli University
Rachele Polidori, Luiss Guido Carli University

12:00 AM

Cybersecurity Knowledge Transfer in Software Outsourcing: A Boundary‑Spanning and Sensemaking Perspective

Maduka Subasinghage, The University of Western Australia
Farkhondeh Hassandoust, University of Auckland
Allen Johnston, University of Alabama

12:00 AM

Disentangling Reactions to Data Breaches: Evidence from Mobile Service Providers

Frederic Schlackl, HEC Montreal
Florian Pethig, Tilburg University

12:00 AM

Employees’ Psychosocial Responses to Cybersecurity Attacks on Organizations

Steffi Haag, Heinrich Heine University Düsseldorf
Andreas Eckhardt, University of Innsbruck

12:00 AM

Exchange Rate and the Supply of Hacking Goods: Evidence from an International Panel

Yushan Yang, HKUST
Jiali ZHOU, American University
Kai-Lung Hui, HKUST

12:00 AM

Extending the Integrative Trust Model to Smart Home Intrusion Detection Adoption

Sascha Löbner, University of Hamburg
Frédéric Tronnier, Goethe University
Adrian Voelker, Goethe University
Kai Rannenberg, Goethe University

12:00 AM

Framing Cyber Resilience in Higher Education: Diagnosing Readiness and Response

Stephen Treacy, University College Cork
Conall Gilleran, Univeristy College Cork
Diarmuid Joseph O Callaghan, Univeristy College Cork
Rishikesh Vinayan, Univeristy College Cork
Angela Patricia Sheppard, Univeristy College Cork
Deriqqa Mawaddah Yulfa, Univeristy College Cork
Brian O'Flaherty, University College Cork

12:00 AM

From Personal Data to Common Good: How AI Reciprocity Shapes Disclosure Intentions in AI-based Smart Energy Services

Alexander Zieglmeier, Professur für Digitale Services und Sustainability
Johann Kranz, Ludwig-Maximilians-University Munich

12:00 AM

How Can Organisations Absorb Cyber Threat Intelligence: A Multiple-Case Study

Mohammed Alsubaie, The University of Melbourne

12:00 AM

How Cyber Fraud Triggers Behavioral Responses: A Stimulus-Organism-Response View of Victims' Behavior

Roshni Kumari, Indian Institute of Management Calcutta
Vimalkumar M, Indian Institute of Management Calcutta

12:00 AM

Leveraging Generative AI for SETA: Designing an Interactive Comic-Based Security Awareness Artifact

Martin Brehmer, Faculty of Business and Economics
Vito Buonassisi, Independent Researcher

12:00 AM

Prosody Training for Lowering Vishing Susceptibility

Benjamin Ampel, Georgia State University
Joseph Buckman, Georgia State University

12:00 AM

Revelation Without Cue-Based Instruction: Rethinking Phishing Simulations as Learning Interventions

Fabian Hable, Vrije Universiteit Amsterdam
Nina Schirrmacher, The University of Sydney
Bart van den Hooff, Vrije Universiteit Amsterdam
Mohammad Rezazade Mehrizi, Vrije Universiteit Amsterdam

12:00 AM

Shadow AI and the Monitoring Paradox: A Typological Theory of Governance Visibility Erosion

Nora Alhelal, University of Oxford
Sadie Creese, University of Oxford
Michael Goldsmith, University of Oxford

12:00 AM

Socio-Technical Conditions of Product Cyber Resilience in the Software Development Lifecycle: A Mixed-Methods Study

Samira Taaibi, Fraunhofer IEM
Emanuel Kahraman, Fraunhofer IEM
Stefan Dziwok, Fraunhofer IEM
Simon Trang, Paderborn University
Eric Bodden, Paderborn University

12:00 AM

Strategic Silence, Strategic Signal: Network Proximity to Data Breaches and Digital Strategic Initiative Disclosure

Hilal Pataci, Alvarez College of Business
T. Ravichandran, Rensselaer Polytechnic Institute
Nishtha Langer, Rensselaer Polytechnic Institute

12:00 AM

Technology-Related Misconduct: A Review and Explanatory Pathway Model

Florian Wintmölle, University of Bamberg

12:00 AM

The Clash of the Head and the Heart in Empathic Artificial Intelligence: Decision Accuracy and Security Tradeoffs

Wenqi Wei, Fordham University
Hüseyin Tanriverdi, University of Texas at Austin
Zihao Yin, Fordham University

12:00 AM

The Weakest Link Fallacy between Hembigs and Self-Fulfilling Prophecies

Wael Soliman, University of Agder
Muriel-Larissa Frank, Interdisciplinary Centre for Security, Reliability and Trust (SnT)
Jonna Järveläinen, University of Jyväskylä

12:00 AM

"You can't just trust having the most expensive EDR": Using case-based learning to help cybersecurity leaders engage with complex sociotechnical systems

Ashley Baines Anderson, University of Melbourne
Atif Ahmad, The University of Melbourne
Shanton Chang, The University of Melbourne

12:00 AM