19th Working Conference on Information Security Management

19th Working Conference on Information Security Management

09-11 June 2026

Co-located with the IFIP SEC conference in Perth, Australia

Organised by IFIP TC-11 Working Group 11.1

With the security of information a significant concern of many organisations, information security management continues to be an important research topic. Advanced safeguards are required to protect the information assets of not only large but also small and distributed enterprises. Effective approaches to information security management, such as policies and certifications, are required, and must be supported by a range of technical and human-centric measures.

The 19th Working Conference on Information Security Management, organized by IFIP TC-11 Working Group 11.1 (Information Security Management) and co-hosted with the 41st IFIP SEC conference, invites you to contribute to the next Working Conference by submitting a full paper; short paper (e.g. research in progress); or, proposal for panel discussions and tutorials. Contributions can either be of a practical, industry-focused nature or reports on academic activities.

We welcome submissions from academia, industry and government. The Working Conference will offer a stream for research in progress short papers that may be particularly suitable for early career researchers and research students to allow research ideas to be explored and feedback obtained in a friendly environment. There will be ample opportunity to engage in networking to build your contacts.

Topics of interest include, but are not limited to, the following:

Developing and implementing effective information security policies

Establishing and maintaining security culture

Security governance and compliance

Strategies for managing security in SME environments

Methodologies and techniques for certification and accreditation

Standards for information security management

Managing technology and people

Organizing and assigning responsibility for security

Outsourcing information security

Risk assessment

Measurement of security

Requirements for awareness, training and education.

Evaluation of information security in companies

Information security surveys and case studies

Instructions to authors

Submitted papers must be written in English, be original, unpublished, and not submitted to another conference or journal for consideration. Submissions should be anonymised. PC members are not required to read the appendices, so the paper should be intelligible without them.

Each paper will receive at least two reviews. At least one author of each accepted paper must register by the registration date and present the paper at the conference. Refer to our website for submission details.

https://ifiptc11.org/wism-19