A Macroergonomic Framework for Computer and Information Security

This paper describes a macroergonomic framework for computer and information security (CIS). Moving away from the current emphasis of technologycentered approaches to CIS, our framework shifts to a multi-dimensional examination of CIS. This examination includes four subsystems of a computer and information security system: the technical, social, organizational, and external environment subsystems. Our framework emphasizes that the interactions within and among these subsystems create technical computer and information security vulnerabilities. The contribution of this framework is a complete view of the complex and multivarious nature of CIS systems. This view is important for understanding the etiology of CIS system vulnerabilties. With this understanding, we can build more secure computer and information systems to remediate CIS breaches and attacks.