01
Translate a sample set of technical findings into multiple reporting formats.
Research projects
Completed Research Project
Cybersecurity, Business & Decision Systems
Human-Centered Cyber Risk Communication for Small Organizations
A study of how technical security findings can be translated into decision-ready risk narratives for organizations without large dedicated security teams.
Project File
- Lead
- Prof. Giovane Martins
- Period
- 2025 — 2026
- Status
- Completed
- Colleges
- College of Information Security · College of Business Tech
Research Question
The question organizing the work.
Can security reporting become more actionable when technical findings are organized around decisions, consequences, and operational ownership instead of severity labels alone?
Context
Why this problem is worth examining.
Small organizations frequently receive security information in formats designed for specialists: vulnerability lists, scanner scores, technical findings, and compliance language.
The project explored whether a different reporting model could preserve technical accuracy while making prioritization easier for leaders responsible for budget, operations, and business continuity.
Methodology
How the question becomes testable work.
The methodology is designed to leave behind evidence and reusable artifacts—not only a conclusion.
02
Compare severity-first reporting with decision-first narratives organized around exposure, consequence, ownership, and remediation effort.
03
Prototype compact dashboards and one-page briefing structures for non-specialist stakeholders.
04
Evaluate which information remains essential when reports must be shortened without becoming misleading.
Research Outputs
What the project is designed to leave behind.
Decision-first report template
Risk briefing model
Dashboard prototype
Teaching case
Next Steps
Where the investigation goes next.
01
Adapt the reporting model for privacy and AI-governance risks.
02
Use the framework in future Business Tech and Information Security exercises.
03
Explore structured comparisons with traditional vulnerability-reporting formats.
Cross-College Research
The problem determines the boundaries—not the org chart.
This project sits across College of Information Security and College of Business Tech. That cross-college structure is intentional: emerging technology problems frequently combine technical, organizational, legal, and human dimensions.
Keywords
Cyber RiskDecision SystemsGRCCommunication
Research Projects