19th Working Conference on Information Security Management

09-11 June 2026

Co-located with the IFIP SEC conference in Perth, Australia
Organised by IFIP TC-11 Working Group 11.1

With the security of information a significant concern of many organisations, information security management continues to be an important research topic. Advanced safeguards are required to protect the information assets of not only large but also small and distributed enterprises. Effective approaches to information security management, such as policies and certifications, are required, and must be supported by a range of technical and human-centric measures.

The 19th Working Conference on Information Security Management, organized by IFIP TC-11 Working Group 11.1 (Information Security Management) and co-hosted with the 41st IFIP SEC conference, invites you to contribute to the next Working Conference by submitting a full paper; short paper (e.g. research in progress); or, proposal for panel discussions and tutorials. Contributions can either be of a practical, industry-focused nature or reports on academic activities.

We welcome submissions from academia, industry and government. The Working Conference will offer a stream for research in progress short papers that may be particularly suitable for early career researchers and research students to allow research ideas to be explored and feedback obtained in a friendly environment. There will be ample opportunity to engage in networking to build your contacts.

Topics of interest include, but are not limited to, the following:

Developing and implementing effective information security policies
Establishing and maintaining security culture
Security governance and compliance
Strategies for managing security in SME environments
Methodologies and techniques for certification and accreditation
Standards for information security management
Managing technology and people
Organizing and assigning responsibility for security
Outsourcing information security
Risk assessment
Measurement of security
Requirements for awareness, training and education.
Evaluation of information security in companies
Information security surveys and case studies

Instructions to authors
Submitted papers must be written in English, be original, unpublished, and not submitted to another conference or journal for consideration. Submissions should be anonymised. PC members are not required to read the appendices, so the paper should be intelligible without them.

Each paper will receive at least two reviews. At least one author of each accepted paper must register by the registration date and present the paper at the conference. Refer to our website for submission details.

https://ifiptc11.org/wism-19