Journal of Cyber Security and Risk Auditing