Cybersecurity governance
How boards and security leaders understand, oversee and respond to cyber risks.
PhD Researcher · Lecturer · Cybersecurity Governance
Researching cybersecurity risk communication and reporting, cognitive biases, and board-level decision-making.
I am a PhD researcher, lecturer and information security professional working at the intersection of information security management, organisational governance and human decision-making.
My doctoral research examines how cognitive biases, psychological distance and risk communication influence cybersecurity decisions at board level. I am particularly interested in how CISOs communicate complex risks to executives, and how those conversations shape organisational priorities and action.
Alongside my research, I teach information security and supervise graduate research. I serve on the Review Board of ISACA Netherlands and contribute to academic and professional discussions on information security governance.
My research looks beyond technical controls to the human factors that shape risk communication, judgement and decisions in the boardroom.
How boards and security leaders understand, oversee and respond to cyber risks.
How systematic patterns in human judgement influence the interpretation of security information.
How reporting language, uncertainty and psychological distance shape board-level decisions.
Academic research and practice-oriented work on information security, human behaviour and governance.
Bled eConference
DOI ↗Bled eConference
DOI ↗Information, 16(3), 209 · Sole author
DOI ↗IIA Netherlands · Co-author
View research ↗Combining research, education and hands-on experience in information security.
PhD Researcher · Cybersecurity Governance
Lecturer · Cybersecurity
Visiting PhD Researcher
Review Board Member
Information security advisory and knowledge sharing
Research and professional roles in information security and cybersecurity
Available for interviews, expert commentary, podcasts, panels and speaking engagements on information security management, cybersecurity risk communication and reporting, and board-level decision-making.
For media enquiries, interviews or speaking invitations, please get in touch directly.
For research collaborations, professional enquiries, media requests or speaking opportunities.
gulet.barre@ou.nl