Dienst van SURF
© 2025 SURF
In case of a major cyber incident, organizations usually rely on external providers of Cyber Incident Response (CIR) services. CIR consultants operate in a dynamic and constantly changing environment in which they must actively engage in information management and problem solving while adapting to complex circumstances. In this challenging environment CIR consultants need to make critical decisions about what to advise clients that are impacted by a major cyber incident. Despite its relevance, CIR decision making is an understudied topic. The objective of this preliminary investigation is therefore to understand what decision-making strategies experienced CIR consultants use during challenging incidents and to offer suggestions for training and decision-aiding. A general understanding of operational decision making under pressure, uncertainty, and high stakes was established by reviewing the body of knowledge known as Naturalistic Decision Making (NDM). The general conclusion of NDM research is that experts usually make adequate decisions based on (fast) recognition of the situation and applying the most obvious (default) response pattern that has worked in similar situations in the past. In exceptional situations, however, this way of recognition-primed decision-making results in suboptimal decisions as experts are likely to miss conflicting cues once the situation is quickly recognized under pressure. Understanding the default response pattern and the rare occasions in which this response pattern could be ineffective is therefore key for improving and aiding cyber incident response decision making. Therefore, we interviewed six experienced CIR consultants and used the critical decision method (CDM) to learn how they made decisions under challenging conditions. The main conclusion is that the default response pattern for CIR consultants during cyber breaches is to reduce uncertainty as much as possible by gathering and investigating data and thus delay decision making about eradication until the investigation is completed. According to the respondents, this strategy usually works well and provides the most assurance that the threat actor can be completely removed from the network. However, the majority of respondents could recall at least one case in which this strategy (in hindsight) resulted in unnecessary theft of data or damage. Interestingly, this finding is strikingly different from other operational decision-making domains such as the military, police and fire service in which there is a general tendency to act rapidly instead of searching for more information. The main advice is that training and decision aiding of (novice) cyber incident responders should be aimed at the following: (a) make cyber incident responders aware of how recognition-primed decision making works; (b) discuss the default response strategy that typically works well in several scenarios; (c) explain the exception and how the exception can be recognized; (d) provide alternative response strategies that work better in exceptional situations.
In the literature about web survey methodology, significant eorts have been made to understand the role of time-invariant factors (e.g. gender, education and marital status) in (non-)response mechanisms. Time-invariant factors alone, however, cannot account for most variations in (non-)responses, especially fluctuations of response rates over time. This observation inspires us to investigate the counterpart of time-invariant factors, namely time-varying factors and the potential role they play in web survey (non-)response. Specifically, we study the effects of time, weather and societal trends (derived from Google Trends data) on the daily (non-)response patterns of the 2016 and 2017 Dutch Health Surveys. Using discrete-time survival analysis, we find, among others, that weekends, holidays, pleasant weather, disease outbreaks and terrorism salience are associated with fewer responses. Furthermore, we show that using these variables alone achieves satisfactory prediction accuracy of both daily and cumulative response rates when the trained model is applied to future unseen data. This approach has the further benefit of requiring only non-personal contextual information and thus involving no privacy issues. We discuss the implications of the study for survey research and data collection.
We thank the authors Hayden and Glenn for commenting on our paper ‘The introduction of a nursing guideline on depression at psychogeriatric nursing home wards: Effects on Certified Nurse Assistants’, which was published in the International Journal of Nursing Studies (Verkaik et al., 2011). In our paper we conclude that the introduction of the nursing guideline ‘Depression in dementia’ had a positive, though small, significant effect on the perceived professional autonomy of Certified Nurse Assistants. We found that effects could probably be enlarged if non-Certified Nurse Assistants and nursing helpers were also trained, and managers paid more attention to the necessary conditions for successful introduction.
MULTIFILE
Creating and testing the first Brand Segmentation Model in Augmented Reality using Microsoft Hololens. Sanoma together with SAMR launched an online brand segmentation tool based on large scale research, The brand model uses several brand values divided over three axes. However they cannot be displayed clearly in a 2D model. The space of BSR Quality Planner can be seen as a 3-dimensional meaningful space that is defined by the terms used to typify the brands. The third axis concerns a behaviour-based dimension: from ‘quirky behaviour’ to ‘standardadjusted behaviour’ (respectful, tolerant, solidarity). ‘Virtual/augmented reality’ does make it possible to clearly display (and experience) 3D. The Academy for Digital Entertainment (ADE) of Breda University of Applied Sciences has created the BSR Quality Planner in Virtual Reality – as a hologram. It’s the world’s first segmentation model in AR. Breda University of Applied Sciences (professorship Digital Media Concepts) has deployed hologram technology in order to use and demonstrate the planning tool in 3D. The Microsoft HoloLens can be used to experience the model in 3D while the user still sees the actual surroundings (unlike VR, with AR the space in which the user is active remains visible). The HoloLens is wireless, so the user can easily walk around the hologram. The device is operated using finger gestures, eye movements or voice commands. On a computer screen, other people who are present can watch along with the user. Research showed the added value of the AR model.Partners:Sanoma MediaMarketResponse (SAMR)
Everyone has the right to participate in society to the best of their ability. This right also applies to people with a visual impairment, in combination with a severe or profound intellectual and possibly motor disability (VISPIMD). However, due to their limitations, for their participation these people are often highly dependent on those around them, such as family members andhealthcare professionals. They determine how people with VISPIMD participate and to what extent. To optimize this support, they must have a good understanding of what people with disabilities can still do with their remaining vision.It is currently difficult to gain insight into the visual abilities of people with disabilities, especially those with VISPIMD. As a professional said, "Everything we can think of or develop to assess the functional vision of this vulnerable group will help improve our understanding and thus our ability to support them. Now, we are more or less guessing about what they can see.Moreover, what little we know about their vision is hard to communicate to other professionals”. Therefore, there is a need for methods that can provide insight into the functional vision of people with VISPIMD, in order to predict their options in daily life situations. This is crucial knowledge to ensure that these people can participate in society to their fullest extent.What makes it so difficult to get this insight at the moment? Visual impairments can be caused by a range of eye or brain disorders and can manifest in various ways. While we understand fairly well how low vision affects a person's abilities on relatively simple visual tasks, it is much more difficult to predict this in more complex dynamic everyday situations such asfinding your way or moving around during daily activities. This is because, among other things, conventional ophthalmic tests provide little information about what people can do with their remaining vision in everyday life (i.e., their functional vision).An additional problem in assessing vision in people with intellectual disabilities is that many conventional tests are difficult to perform or are too fatiguing, resulting in either no or the wrong information. In addition to their visual impairment, there is also a very serious intellectual disability (possibly combined with a motor impairment), which makes it even more complex to assesstheir functional vision. Due to the interplay between their visual, intellectual, and motor disabilities, it is almost impossible to determine whether persons are unable to perform an activity because they do not see it, do not notice it, do not understand it, cannot communicate about it, or are not able to move their head towards the stimulus due to motor disabilities.Although an expert professional can make a reasonable estimate of the functional possibilities through long-term and careful observation, the time and correct measurement data are usually lacking to find out the required information. So far, it is insufficiently clear what people with VZEVMB provoke to see and what they see exactly.Our goal with this project is to improve the understanding of the visual capabilities of people with VISPIMD. This then makes it possible to also improve the support for participation of the target group. We want to achieve this goal by developing and, in pilot form, testing a new combination of measurement and analysis methods - primarily based on eye movement registration -to determine the functional vision of people with VISPIMD. Our goal is to systematically determine what someone is responding to (“what”), where it may be (“where”), and how much time that response will take (“when”). When developing methods, we take the possibilities and preferences of the person in question as a starting point in relation to the technological possibilities.Because existing technological methods were originally developed for a different purpose, this partly requires adaptation to the possibilities of the target group.The concrete end product of our pilot will be a manual with an overview of available technological methods (as well as the methods themselves) for assessing functional vision, linked to the specific characteristics of the target group in the cognitive, motor area: 'Given that a client has this (estimated) combination of limitations (cognitive, motor and attention, time in whichsomeone can concentrate), the order of assessments is as follows:' followed by a description of the methods. We will also report on our findings in a workshop for professionals, a Dutch-language article and at least two scientific articles. This project is executed in the line: “I am seen; with all my strengths and limitations”. During the project, we closely collaborate with relevant stakeholders, i.e. the professionals with specific expertise working with the target group, family members of the persons with VISPIMD, and persons experiencing a visual impairment (‘experience experts’).
Nederland kent ongeveer 220.000 bedrijfsongevallen per jaar (met 60 mensen die overlijden). Vandaar dat elke werkgever verplicht is om bedrijfshulpverlening (BHV) te organiseren, waaronder BHV-trainingen. Desondanks brengt slechts een-derde van alle bedrijven de arbeidsrisico’s in kaart via een Risico-Inventarisatie & Evaluatie (RI&E) en blijft het aandeel werknemers met een arbeidsongeval hoog. Daarom wordt er continu geïnnoveerd om BHV-trainingen te optimaliseren, o.a. door middel van Virtual Reality (VR). VR is niet nieuw, maar is wel doorontwikkeld en betaalbaarder geworden. VR biedt de mogelijkheid om veilige realistische BHV-noodsimulaties te ontwikkelen waarbij de cursist het gevoel heeft daar echt te zijn. Ondanks de toename in VR-BHV-trainingen, is er weinig onderzoek gedaan naar het effect van VR in BHV-trainingen en zijn resultaten tegenstrijdig. Daarnaast zijn er nieuwe technologische ontwikkelingen die het mogelijk maken om kijkgedrag te meten in VR m.b.v. Eye-Tracking. Tijdens een BHV-training kan met Eye-Tracking gemeten worden hoe een instructie wordt opgevolgd, of cursisten worden afgeleid en belangrijke elementen (gevaar en oplossingen) waarnemen tijdens de simulatie. Echter, een BHV-training met VR en Eye-Tracking (interacties) bestaat niet. In dit project wordt een prototype ontwikkeld waarin Eye-Tracking wordt verwerkt in een 2021 ontwikkelde VR-BHV-training, waarin noodsituaties zoals een kantoorbrand worden gesimuleerd (de BHVR-toepassing). Door middel van een experiment zal het prototype getest worden om zo voor een deel de vraag te beantwoorden in hoeverre en op welke manier Eye-Tracking in VR een meerwaarde biedt voor (RI&E) BHV-trainingen. Dit project sluit daarmee aan op het missie-gedreven innovatiebeleid ‘De Veiligheidsprofessional’ en helpt het MKB dat vaak middelen en kennis ontbreekt voor onderzoek naar effectiviteit rondom innovatieve-technologieën in educatie/training. Het project levert onder meer een prototype op, een productie-rapport en onderzoeks-artikel, en staat open voor nieuwe deelnemers bij het schrijven van een grotere aanvraag rondom de toepassing en effect van VR en Eye-Tracking in BHV-trainingen.