Should I Worry? A Cross Cultural Examination of Account Security Incident Response

Explore a cross-cultural examination of account security incident response through a qualitative interview study conducted with 67 users who recently experienced suspicious login incidents on their Facebook accounts. Delve into the common process of incident response across participants from five countries with varying online and offline cultures. Gain insights into users' causal attributions of security incidents, decision-making processes for taking action, and the impact of mental models on response behaviors. Examine cross-cultural differences in response processes related to internet censorship, collectivism, and platform use. Learn about the unique nature of incident-response information seeking and known attacker threat models. Discover areas for future technical development to enhance user security and improve the incident response process based on findings from this large, cross-cultural qualitative study of digital security.

Intro
Cross cultural interview study of users' process of incident response (n=67)
Carefully designed methodology to ensure validity
Extensive training to ensure cross-country validity
Users' causal attributions (classifications) of the incident
Decision to take action depends on mental model & strength of mental model
11 took an off-platform action post- notification
Cross-cultural differences in response process relate to internet censorship, collectivism & platform use
Improving the incident response process