The pervasiveness of computer networks has increased our vulnerability to systems-based attacks. In response, organizations have increased the attention paid to computer-based threats to their information, systems, and processes. The effects of this scrutiny are not at all clear, and the intention to increase security does not always follow with the desired effect. This mini-track presents three sessions and a wide range of papers that look towards improving our understanding and readiness for an inherently unpredictable future.