Dan Harnesk

Associate Professor in the subject Computer and Systems Science.

I mainly do  information security research  focusing on the context in which security is planned, managed, and enacted by computer users. This could be described as a socio-technical, or socio-organizational view that for some years now has influenced my research. I have particular interest for the interplay between security management and computer users security behavior. 

My research approach has always been based on qualitative methods to which ANT, Organzational routines, strategic management theory, organizational psychology are examples of informing elements. I take particular interest in exploring the ways that information security influence and shape work practices in organizations. Following from that, I have recently begun to study information security practises with a perspective grounded in the sociomaterial view on IT artifacts. The fundamental assumption is here that information security is entangled and entwined with human activities performed in work processes within and between organizations. This is in many ways challenging to the traditional view of information security, which posit for example that information protection is the dominant mode in the organizational context. To me, it is therefore interesting to learn more about ways to safeguard information assets, while at the same time allowing organizational members to enact these safeguards in order to enhance interpersonal communication practises.

Papers in progress:    

(under review) Collective IT artifacts: A Pathway to Inclusive Crisis Infrastructures, submitted to International journal