Lateral phishing attacks can be devastating for users and organisational IT teams as these originate from legitimate, but compromised, email accounts that benefit from the implicit trust between sender and recipients. In this paper, we begin to explore the human-centred space of lateral phishing attacks through interviews with 5 security practitioners and 17 employees from the UK and India. We report how security practitioners predominantly rely on employees to alert them to compromised accounts, and how this can create a delay during which the attack can continue. Our interviews with employees, on the other hand, found that individuals may not be reliable; they struggled to detect slight changes to messages, and over-relied on markers that cannot identify lateral attacks. We discuss the symbiotic relationship between security practitioners and employees for combatting lateral phishing attacks within organisations, and present recommendations for improving resistance to these attacks.

Despite a growing number of studies describing the digital ecosystems of the home, few have explored the human component of this ecosystem and fewer have accounted for household and relationship diversity. We asked the inhabitants of nine households to share images of their digital devices and then interviewed them about how the technology was distributed and used, what roles they adopted in relation to the different devices and what boundaries or rules they set up to manage joint use. Following a thematic analysis, we describe (i) the digital components of the ecosystem and their use; (ii) the humans in the ecosystem and their relationships with technology and with each other, and (iii) interconnectedness in terms of joint use and self- or other-imposed restrictions. We use this data to describe dimensions against which households will meaningfully differ and suggest how these dimensions might be used to explore the implications of household and relationship diversity for future smarthome technologies.

The rich detail generated by qualitative research is essential for understanding workplace contexts and processes for organizational development. This can be a highly involved and extensive process, thus limiting the number of people who can normally be allowed to fully participate. This is especially problematic when it comes to workplace collaboration and development, as it means that a large number of voices are not considered and heard. In this paper, we provide and implement a novel semi-automated approach that enables large-scale qualitative research. This was done within the context of developing a new organizational strategy for a large and diverse multi-lingual international development organization. We included over 150 different stakeholders whilst enabling their views to be collected and analyzed in depth. This case study demonstrates how to effectively implement qualitative interview research at scale with an application to the employee voice setting, contributing the tools and means to achieve this.