The growing sophistication, frequency and severity of cyberattacks targeting all sectors highlight their inevitability and the impossibility of completely protecting the integrity of critical computer systems. In this context, cyber-resilience offers an attractive alternative to the existing cybersecurity paradigm. We define cyber-resilience as the capacity to withstand, recover from and adapt to the external shocks caused by cyber-risks. This article seeks to provide a broader organizational understanding of cyber-resilience and the tensions associated with its implementation. We apply Weick's (1995) sensemaking framework to examine four foundational tensions of cyber-resilience: a definitional tension, an environmental tension, an internal tension, and a regulatory tension. We then document how these tensions are embedded in cyber-resilience practices at the preparatory, response and adaptive stages. We rely on qualitative data from a sample of 58 cybersecurity professionals to uncover these tensions and how they reverberate across cyber-resilience practices.
DOCUMENT
Producing evidence that can be used in court is a central goal of criminal investigations. Forensic science focuses with considerable success on the production of pieces of evidence from specific sources. However, less is known about how a team of investigating police officers progressively produces a body of evidence during the course of a criminal investigation. This literature review uses Weickian sensemaking to analyse what is known about this process in criminal investigations into organised crime. Focusing on the criminal investigation team, collective sensemaking is used as a lens through which to place the reasoning processes used in constructing evidence in a social context. In addition to describing three constituent parts of collective sensemaking relevant for criminal investigations, six factors are identified that influence the quality of collective sensemaking. Building on these results, nine focal points are presented for analysing the sensemaking processes in a criminal investigation team, aimed at advancing knowledge about the production of evidence in criminal investigations of organised crime. Furthermore, a definition of evidence is developed that is suitable for studying sensemaking in the context of an ongoing criminal investigation.
DOCUMENT
The potential of a ‘data-driven life’, together with the realization of Weiser’s vision of ‘the disappearing computer’ have been embraced by many. However, the increasing invisibility, virtuality and complexity of data systems also come with a variety of concerns, such as issues of sensemaking, ownership, representation and control. Although data and technology is all around us, its virtual and invisible nature, thereby its lack of material and tangible forms has implications on the way data systems are (mis) used, understood, experienced and perceived. This paper presents craft-based approaches for physical sense making –widely ranging from physical artefacts to show and hide from monitoring, to crafting data physicalizations for critical thinking, communication and creativity. In doing so, this paper discusses how crafting physical forms can be used as a way to grasp and understand ‘invisible’ data systems.
DOCUMENT
