The Workshop on Challenges in Information Security and Privacy Management at the 11th International Conference on Availability, Reliability and Security (ARES-ISMP 2016) provides a discussion and interaction platform for multidisciplinary knowledge exchange between practitioners and researchers. It is building on the results of the Organizational Aspects of Security Workshop (ARES-OSA) and of the Industrial Tracks (ARES-IND) of previous years. Recent challenges and developments in industry, healthcare, and government have amply demonstrated the necessity of such an integrated approach.

For this year’s workshop, we especially invite submissions of research related to information security management, state-of-the-art practice and experience reports from ongoing industry-based research, lessons learned from implemented projects and practical experience. We also encourage the submission of applied methods, models and tools which have proven successful in supporting information security management leading to practical results and demonstrations.

Topics of interest comprise but are not limited to:

Information security management
Security management standardization, including cyber security and privacy
Auditing and certification
Process-orientation in information security
Risk-based thinking processes in information security management
IT security and its integration into business processes and systems
People management in information security
Resilience and business continuity management
Coping with large scale system and infrastructure failures
Managing privacy vs. security in business processes
Privacy by design and built-in privacy
Managerial challenges arising from technologies such as Cloud-based serves, the Internet of Things, Robotics, and IACS
Information security management in edutainment and gaming
Managerial perspectives on cyber security in business networks and society
The role of big data and open source intelligence in information security management
Economics of information security
Information security management facing financial pressures and legal obligations
IT security and its integration into business processes and systems