{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,13]],"date-time":"2026-04-13T17:48:31Z","timestamp":1776102511925,"version":"3.50.1"},"reference-count":43,"publisher":"Association for Computing Machinery (ACM)","issue":"CSCW2","license":[{"start":{"date-parts":[[2024,11,7]],"date-time":"2024-11-07T00:00:00Z","timestamp":1730937600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"DOI":"10.13039\/100008397","name":"The Velux Foundations","doi-asserted-by":"crossref","id":[{"id":"10.13039\/100008397","id-type":"DOI","asserted-by":"crossref"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["Proc. ACM Hum.-Comput. Interact."],"published-print":{"date-parts":[[2024,11,7]]},"abstract":"<jats:p>Small- and medium-sized enterprises (SMEs) are an essential part of the global economy and paramount to local communities and employment markets. They are also considered to be particularly vulnerable to cyberattacks as they lack technical competencies, strict controls, and organizational routines. We present the results of an ethnographic study of 30 SMEs in Denmark to further our understanding of how companies in this segment handle cybersecurity in their daily practices. We suggest that cybersecurity is dealt with as a mundane art: instead of striving for solutions, SMEs must leave things undone, endure partially broken systems, and resort to making things slightly better or worse but never good. In line with CSCW scholarship on care in broken worlds, we emphasize the various tactics of living with insecure technologies. In a broken world, securing is often not about assurance or following rules but about handling dilemmas, breaking things a little but not a lot, or waiting things out.<\/jats:p>","DOI":"10.1145\/3686893","type":"journal-article","created":{"date-parts":[[2024,11,8]],"date-time":"2024-11-08T15:52:40Z","timestamp":1731081160000},"page":"1-17","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":2,"title":["The Mundane Art of Cybersecurity: Living with Insecure IT in Danish Small- and Medium-Sized Enterprises"],"prefix":"10.1145","volume":"8","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-4661-2638","authenticated-orcid":false,"given":"Laura","family":"Kocksch","sequence":"first","affiliation":[{"name":"Aalborg University, Copenhagen, Denmark"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9008-0988","authenticated-orcid":false,"given":"Torben Elgaard","family":"Jensen","sequence":"additional","affiliation":[{"name":"Aalborg University, Copenhagen, Denmark"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2024,11,8]]},"reference":[{"key":"e_1_2_2_1_1","doi-asserted-by":"publisher","DOI":"10.1145\/322796.322806"},{"key":"e_1_2_2_2_1","unstructured":"The World Bank. [n. d.]. SME Finance. https:\/\/www.worldbank.org\/en\/topic\/smefinance"},{"key":"e_1_2_2_3_1","volume-title":"Sociomaterial-Design: Bounding technologies in practice","author":"Bj\u00f8rn Pernille","unstructured":"Pernille Bj\u00f8rn and Carsten \u00d8sterlund. 2014. Sociomaterial-Design: Bounding technologies in practice. Springer London."},{"key":"e_1_2_2_4_1","doi-asserted-by":"publisher","DOI":"10.17645\/pag.v6i2.1385"},{"key":"e_1_2_2_5_1","volume-title":"Making Kin not Population - Reconceiving Generations","author":"Clark Adele","unstructured":"Adele Clark and Donna Haraway. 2018. Making Kin not Population - Reconceiving Generations. Prickly Paradigm Press, Chicago, IL."},{"key":"e_1_2_2_6_1","doi-asserted-by":"publisher","DOI":"10.1145\/2818048.2820077"},{"key":"e_1_2_2_7_1","volume-title":"The government of emergency","author":"Collier Stephen J","unstructured":"Stephen J Collier and Andrew Lakoff. 2021. The government of emergency. Princeton University Press, Princeton, NJ."},{"key":"e_1_2_2_8_1","unstructured":"The European Commission. 2023. Directive on measures for a high common level of cybersecurity across the Union. https:\/\/digital-strategy.ec.europa.eu\/en\/node\/9654\/printable\/pdf"},{"key":"e_1_2_2_9_1","volume-title":"Security and usability","author":"Cranor Lorrie Faith","unstructured":"Lorrie Faith Cranor and Simson Garfinkel. 2005. Security and usability. O'Reilly Media."},{"key":"e_1_2_2_10_1","doi-asserted-by":"publisher","DOI":"10.1145\/3555090"},{"key":"e_1_2_2_11_1","doi-asserted-by":"publisher","DOI":"10.1007\/s10869-021-09732-9"},{"key":"e_1_2_2_12_1","doi-asserted-by":"publisher","DOI":"10.1177\/0162243914553129"},{"key":"e_1_2_2_13_1","doi-asserted-by":"publisher","DOI":"10.1145\/1124772.1124855"},{"key":"e_1_2_2_14_1","doi-asserted-by":"publisher","DOI":"10.1007\/s00779-004-0308--5"},{"key":"e_1_2_2_15_1","doi-asserted-by":"publisher","DOI":"10.1093\/ips\/olac013"},{"key":"e_1_2_2_16_1","unstructured":"Erhvervsstyrelsen. 2021. Segmentieringsanalyse af sm\u00e5 og mellemstore virksomheder. https:\/\/erhvervsstyrelsen.dk\/sites\/default\/files\/2022--12\/Rapport-segmenteringsanalyse-SMVer-Erhvervsstyrelsen-Apr2021_U.pdf"},{"key":"e_1_2_2_17_1","unstructured":"The Danish Government. 2021. The Danish National Strategy for Cyber and Information Security. https:\/\/en.digst.dk\/media\/27024\/digst_ncis_2022--2024_uk.pdf"},{"key":"e_1_2_2_18_1","volume-title":"Routledge","author":"Hammersley Martyn","unstructured":"Martyn Hammersley and Paul Atkinson. 1995. Ethnography (2 ed.). Routledge, London, England."},{"key":"e_1_2_2_19_1","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2011.74"},{"key":"e_1_2_2_20_1","doi-asserted-by":"publisher","DOI":"10.1145\/2858036.2858470"},{"key":"e_1_2_2_21_1","doi-asserted-by":"crossref","unstructured":"Alan Irwin and Brian Wynne (Eds.). 1996. Misunderstanding Science?: The Public Reconstruction of Science and Technology. Cambridge University Press New York.","DOI":"10.1017\/CBO9780511563737"},{"key":"e_1_2_2_22_1","doi-asserted-by":"publisher","DOI":"10.7551\/mitpress\/9042.003.0015"},{"key":"e_1_2_2_23_1","volume-title":"Ecological Reparation. Repair, Remediation and Resurgance in Social and Environmental Conflict","author":"Jackson Steven J.","year":"2023","unstructured":"Steven J. Jackson. 2023. Ordinary Hope. In Ecological Reparation. Repair, Remediation and Resurgance in Social and Environmental Conflict. Bristol University Press, 417--433. https:\/\/sjackson.infosci.cornell.edu\/Jackson_OrdinaryHope(EcologicalReparation2023).pdf"},{"key":"e_1_2_2_24_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-981-99-9807-4"},{"key":"e_1_2_2_25_1","doi-asserted-by":"publisher","DOI":"10.1145\/3274361"},{"key":"e_1_2_2_26_1","doi-asserted-by":"publisher","DOI":"10.1145\/3544549.3585597"},{"key":"e_1_2_2_27_1","doi-asserted-by":"publisher","DOI":"10.1017\/eis.2020.10"},{"key":"e_1_2_2_28_1","volume-title":"The Body Multiple. Ontology in Medical Practice","author":"Mol Annemarie","unstructured":"Annemarie Mol. 2002. The Body Multiple. Ontology in Medical Practice. Duke University Press, Durham, NC."},{"key":"e_1_2_2_29_1","doi-asserted-by":"publisher","DOI":"10.1111\/j.1365--2575.2006.00221.x"},{"key":"e_1_2_2_30_1","doi-asserted-by":"publisher","DOI":"10.1177\/0170840607081138"},{"key":"e_1_2_2_31_1","doi-asserted-by":"publisher","DOI":"10.5465\/19416520802211644"},{"key":"e_1_2_2_32_1","doi-asserted-by":"publisher","DOI":"10.1177\/2053951718756685"},{"key":"e_1_2_2_33_1","doi-asserted-by":"publisher","DOI":"10.1145\/2998181.2998191"},{"key":"e_1_2_2_34_1","doi-asserted-by":"publisher","DOI":"10.1145\/3498891.3498896"},{"key":"e_1_2_2_35_1","unstructured":"Aksel Sandemose. 2000. En flygtning krydser sit spor: Espen Arnakkes kommentarer til Janteloven."},{"key":"e_1_2_2_36_1","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2016.110"},{"key":"e_1_2_2_37_1","doi-asserted-by":"publisher","DOI":"10.1145\/2663887.2663904"},{"key":"e_1_2_2_38_1","volume-title":"Princeton University Press","author":"Tsing Anna Lowenhaupt","unstructured":"Anna Lowenhaupt Tsing. 2004. Friction. Princeton University Press, Princeton, NJ."},{"key":"e_1_2_2_39_1","volume-title":"The mushroom at the end of the world","author":"Tsing Anna Lowenhaupt","unstructured":"Anna Lowenhaupt Tsing. 2015. The mushroom at the end of the world. Princeton University Press, Princeton, NJ."},{"key":"e_1_2_2_40_1","doi-asserted-by":"publisher","DOI":"10.1145\/3512915"},{"key":"e_1_2_2_41_1","doi-asserted-by":"publisher","DOI":"10.1145\/2073276.2073283"},{"key":"e_1_2_2_42_1","doi-asserted-by":"publisher","DOI":"10.1007\/978--94-007--2724--3_10"},{"key":"e_1_2_2_43_1","doi-asserted-by":"publisher","DOI":"10.1145\/3406865.3418590"}],"container-title":["Proceedings of the ACM on Human-Computer Interaction"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3686893","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3686893","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,8,21]],"date-time":"2025-08-21T09:20:56Z","timestamp":1755768056000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3686893"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,11,7]]},"references-count":43,"journal-issue":{"issue":"CSCW2","published-print":{"date-parts":[[2024,11,7]]}},"alternative-id":["10.1145\/3686893"],"URL":"https:\/\/doi.org\/10.1145\/3686893","relation":{},"ISSN":["2573-0142"],"issn-type":[{"value":"2573-0142","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024,11,7]]},"assertion":[{"value":"2024-11-08","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}