My research aims to improve management practice of cybersecurity in organizations. I draw research questions from real-world problems and engage in case study research to understand how organizations have handled these problems in practice. I like to build process models to given practitioners concrete insights they can use to structure their thinking and improve management practices.

The Cybersecurity Management research team complements the existing technical cybersecurity research at the Melbourne School of Engineering to provide a distinctive capability to address ‘real-world’ cybersecurity prevention and response challenges faced by organizations today.