This course will examine the role played by human factors in the management of security within socio-technical systems. In particular, it will deal with the issues of both accidental and intentional threat actors through a consideration of human error (slips, lapses, mistakes) and violations (accidental and intentional). It will then frame those issues within the context of systems failure and the provision of security within safety critical organisations.

The course is delivered over 3 full days. As part of the learning design for this course, it was structured for a blended (student-centred) form of delivery and has been redeveloped for online delivery (asynchronous) but with some online, face-to-face sessions.

None

None

1. Report; Group; 4,500 words; 75%; ILOs 1-5.

2. Report; Group; 600 words; 25%; ILOs 1-5.

The course will offer an overview of the processes around the provision of safety and security and do so from a human factors (Ergonomics) perspective. The course considers the role played by intentional and accidental threat actors in the generation of security failures and it will have a particular focus on the role that systems complexity can play in generating emergent conditions which can exceed the abilities of human actors to manage them. The course aims to highlight the role that human agency can play in the embedding of error and violation potential within organisational systems, that can create the conditions in which staff are caught in error and violation traps. These will   ultimately erode the security controls that are put in place to prevent systems failure.  Participants will be introduced to a range of tools, techniques and practices which are commonly used within organisations to address the issues of security and safety in socio-technical systems.

By the end of this course students will be able to:

1. Identify, contextualise and critique the processes that lead to the development of error and violation potential within organisational processes from both latent and active conditions and be able to research and develop a threat matrix for an organisation that they are familiar with, showing how vulnerabilities in both operational processes and security systems can be embedded and exposed. This will require the analysis and critique of an organisation's current security and human factors strategies using a range of appropriate tools and techniques around the identification of vulnerabilities.

2. Develop and evaluate a range of design options around the introduction of a security system for an organisation and highlight the potential for errors and violations within that design.

3. Evaluate and discuss the potential for threat actors to cause harm within organisations either through acts of commission or omission and proposed reasoned and robust defences to deal with those threats.

4. Show an understanding of the challenges of working within multi-disciplinary teams to address security vulnerabilities and develop coping strategies to deal with those challenges in a practical context

5. Present the findings of their analysis in both written and presentational forms.