Call for Papers ACM SIGMIS Computers and People Research 2015 http://www.sigmis.org Cyber Security Workforce in the Global Context Location: Newport Beach, California USA June 4-‐6, 2015 Conference website: http://www.sigmis.org/sigcpr2015 Submission website: https://easychair.org/conferences/?conf=acmsigmiscpr2015 IMPORTANT DATES Paper submission December 19, 2014 January 10, 2015 Notification of acceptance February 27, 2015 Camera-‐ready papers March 29, 2015 Conference Theme The theme of this conference is timely given the global demand for a cybersecurity workforce of sufficient scope and capability to meet ever-‐growing cybersecurity threats. The 2013 (ISC)2 Global Information Security Workforce Study revealed that even with double-‐digit growth in recent years, and significant investments in the development of the cybersecurity workforce from national governments and other stakeholders across the globe, the demand for cybersecurity professionals still significantly outpaces the supply. Security professionals are critical to the successful implementation of strategic cybersecurity initiatives, technical cybersecurity products, and security awareness programs. Accordingly, the vitality of the cybersecurity workforce, and the vulnerability to our networked infrastructure and data stores posed by a shortage of qualified professionals, is an urgent priority facing the global economy. The National Association of State Chief Information Officers (NASCIO) in the United States ranked security as the number one strategic management priority in 2014. This concern is shared by individuals, organizations, and national state governments alike. The increasingly complex global environment in which cybersecurity professionals must operate includes rapid advancements in technology artifacts (e.g., mobile devices) and evolving infrastructures (e.g., cloud computing, social media) that support changes in user behavior. As the (ISC)2 report indicates, these professionals must manage a dynamic set of risks while defending networked assets from attack by hackers, insider threats, and unknown adversaries. Often, managing risks means balancing security and privacy concerns. The recent revelations by Edward Snowden, an IT contractor working for the United States National Security Agency, highlight this tension between security and privacy. Important questions for “computers and people” researchers (CPR) include: how are cybersecurity professionals managing this tension? are they adequately prepared to do so? are future members of the cybersecurity workforce being adequately prepared to take on the privacy and security challenges of tomorrow? Answers to these questions are being considered through efforts such as the 2013 United States National Research Council investigation of professionalization in building the cybersecurity workforce. It seeks 1 to shed light on which professionalization activities (e.g., certification, licensure, codes of ethics, continuing education requirements) might positively impact our ability to create a workforce capable of addressing the emerging threat. We believe that the “CPR” research community can also provide answers. In addition to the cyber security topics listed hereunder, authors are invited to submit work on topics related to Computers and People research and practice traditionally presented at ACM SIGMIS CPR. List of Relevant Topics ACM SIGMIS CPR 2015 welcomes research and practice submissions that address issues congruent with the conference theme. These topics include, but are not limited to: • Cyber security professionals (attraction, retention and development) • Recruitment and retention of IT and IT security related “majors” • Workplace security policies: compliance implications for managers and employees • Managers’ beliefs and attitudes toward information privacy and security • IT personnel perspectives on IT and information security and privacy • Financial factors and “Return on Investment” in hiring and retaining IT security personnel • Making a business case for organizational investment in IT security personnel • Staffing models for IT security personnel • Role of IT personnel in organizational response to data security breaches • Employee monitoring, surveillance and privacy • Information security technologies, operations, controls and human behavioral controls • Implications of privacy, security and confidentiality laws and regulations on IT professionals • The role of IT personnel in workplace monitoring and surveillance • Education and preparation programs for cyber security IT professionals • Personnel implications of cyber warfare, cyber-‐crimes, and cyber terrorism • Knowledge, skills, and abilities required to become an IT security professional in the coming decade • Challenges of maintenance and securing of electronic records in the workplace • IT security personnel work satisfaction and turnover in the workplace • The impact of social media and open culture on confidentiality, privacy and security • Diversity in the cyber security workforce • Professionalization of the cyber security workforce Doctoral Consortium A doctoral consortium will take place on the day prior to the conference. This doctoral consortium is targeted for students who are at an early stage of writing their dissertation proposal (typically in the 2nd or 3rd year in a doctoral program), and who are conducting research on a CPR topic. The purpose of the consortium is two-‐
fold: 1) provide feedback and guidance to students on their proposal while at a stage where feedback can be considered for future dissertation work, and 2) provide mentoring and networking opportunities to students who wish to pursue careers as CPR researchers. Doctoral students must be nominated to the consortium by a faculty sponsor. Students nominated for the consortium should submit a 10-‐page research proposal (including all text, figures, and references) to be reviewed by a panel of highly qualified senior faculty mentors. The 3-‐5 students selected to participate in the doctoral consortium will receive two rounds of written feedback on their proposal. At the conference, each student will have 40-‐60 minutes to present their research ideas and receive feedback in-‐person from six-‐to-‐eight experienced CPR researchers. Additional information, including submission deadlines, can be found at http://www.sigmis.org/sigcpr2015. 2 Student Research Competition Students’ posters and demo submissions will be entered into the ACM Student Research Competition. Qualified entrants must have current ACM student membership, have graduate or undergraduate student status at the time of submission (October 2014), and be the only student working on the project. While not mandatory, entrants are encouraged to submit a letter from their advisor describing the specific contributions made by the student. High School, Undergraduate and Graduate students will be treated in separate divisions (students starting their first year of graduate school at the time of the conference will be considered as undergraduates). Format of Submissions ACM SIGMIS CPR 2015 welcomes completed research papers, research-‐in-‐progress papers, industry case studies, or proposals for panel discussions or tutorials. All papers must be original, unpublished elsewhere, and in the style of MIS Quarterly. All reviewing will be double-‐blind. ● Completed research papers must not exceed 5000 words or 28 double-‐spaced pages including all text, figures, and tables. The cover page, abstract, keywords, and references are excluded from this page count. ● Research-‐in-‐progress papers must not exceed 2000 words or 12 double-‐spaced pages including all text, figures, and tables. The cover page, abstract, keywords, and references are excluded from this page count. ● Panel and tutorial proposals must include the names and affiliations of panelists who have agreed to participate and a 1-‐2 page summary of the topic, including a description of how the session will be structured. ● Industry case studies may report specific strategies being employed or under development to address CPR issues and should be no longer than 3500 words or 21 double-‐spaced pages including all text, figures, and tables. The cover page, abstract, keywords, and references are excluded from this page count. ● Research proposals: Students nominated for the doctoral consortium should submit a 10-‐page research proposal (including all text, figures, and references) to be reviewed by a panel of highly qualified senior faculty mentors. ● Posters/demo sessions provide an opportunity to showcase work-‐in-‐progress in an informal setting. Authors should submit a two-‐page abstract in PDF format describing what the poster would present. The abstract should clearly state: (a) the problem being addressed; (b) what makes this problem interesting, important, and difficult; (c) your approach to the problem; and (d) the key contribution. In the final version of the abstract, you should include a URL that provides additional information about your work. We strongly encourage doctoral, masters, undergraduate, community college and high school research student submissions. The SIGMIS 2015 Poster and Demo committee will review all posters and demo proposals. Authors of accepted posters must present student posters at the conference and have a printed version of the abstract or poster to handout to attendees. Poster Requirements A poster is A0 paper size in portrait mode (841 × 1189mm), to which you can affix visually appealing material that describes your research. Alternatively, you can use the space as a continuum. You should prepare the best material (visually appealing and succinct) that effectively communicates your research problem, techniques, results, and what is novel/important about the work. Submission Website: https://easychair.org/conferences/?conf=acmsigmiscpr2015 Proceedings Accepted papers will be published by ACM in the refereed conference proceedings, which will be distributed at the conference. Completed research and case study papers will be published in their entirety. Extended 3 abstracts will be published for panel discussions and research-‐in-‐progress papers. All presented papers will be considered for the Magid Igbaria Outstanding Conference Paper of the Year Award. The Magid Igbaria Outstanding Conference Paper and other exemplar papers will be invited for publication in the DATA BASE for Advances in Information Systems – the quarterly journal publication of ACM SIG-‐MIS. Proceedings of all previous CPR conferences are available in the ACM Digital Library at http://portal.acm.org/dl.cfm. Conference Location The conference will be held in Newport Beach, California. Hotel information and logistics will be announced in upcoming weeks. Conference Committee Conference Co-‐Chairs Diana Burley, The George Washington University, USA ([email protected]) Indira Guzman, Trident University International, USA ([email protected]) Program Co-‐Chairs Daniel P. Manson, California State Polytechnic University, Pomona, USA ([email protected]) Leigh Ellen Potter, Griffith University, Australia ([email protected]) Local Arrangements Co-‐Chairs Conrad Shayo, Cal State San Bernardino, USA ([email protected]) Treasurer Susan Yager, Southern Illinois University Edwardsville, USA ([email protected]) Publicity Co-‐Chairs Americas Region: Joon Park, Syracuse University, USA ([email protected]) Conrad Shayo, Cal State San Bernardino, USA ([email protected]) European Region: Andreas Eckhardt, Goethe University Frankfurt, Germany ([email protected]‐frankfurt.de) Austral-‐Asia-‐Pacific Region: Rajendra Bandi, Indian Institute of Management Bangalore, India ([email protected]) Doctoral Consortium Co-‐Chairs Lorne Olfman, Claremont Graduate University, USA ([email protected]) Damien Joseph, Nanyang Technological University, Singapore ([email protected]) 4