Skip to content Skip to footer
Associate Professor Sergeja Slapnicar
Associate Professor

Sergeja Slapnicar

Email: 
Phone: 
+61 7 334 68047

Overview

Background

Sergeja Slapničar is Associate Professor of Accounting and Co-lead of Digital Finance Research Hub. Her research is at the intersection of auditing, risk management, cyber security, and AI governance. She investigates how organisations financially quantify and audit cyber risk, coordinate the lines of defence in cyber security, and manage cyber and AI risks effectively. Sergeja disseminates her research findings to professional and regulatory audiences through policy engagement, practitioner journals, and by presenting at national and international industry events. She is a member of the Editorial Boards of Journal of Management Control, International Journal of Auditing, and Behavioral Research in Accounting. Sergeja is a passionate educator whose work-integrated approach, connecting students with real startups, has earned multiple awards, including faculty, university, and national citations for outstanding contribution to student learning.

She has extensive Board experience by having served as a non-executive Director in a systemic bank in Eurozone; in a multinational pharmaceutical corporation, on the Board of the Slovenian Agency for Public Oversight of Auditing, as a Chair of the settlement committee in owners' disputes (Slovenia) and as an independent member in audit and remuneration committees of various public interest entities (the Slovenian Bad Bank among others). She has trained over 1,000 executive and non-executive directors in accounting, finance and cyber security risk management at the Slovenian Directors Association, and advised organisations on risk management. Prior to her employment at the UQ Business School, Sergeja was a Professor at the University of Ljubljana, Slovenia. She is a member of ISACA; serves on the Education Committee of the Institute of Internal Auditors Australia and on the Auditing, Assurance, and Ethics Standards Committee at the European Accounting Association.

Availability

Associate Professor Sergeja Slapnicar is:
Available for supervision

Qualifications

  • Member, Accounting and Finance Association of Australia and New Zealand, Accounting and Finance Association of Australia and New Zealand
  • Member, European Accounting Association, European Accounting Association
  • Member, ISACA, ISACA
  • Member, Institute of Internal Auditors Australia, Institute of Internal Auditors Australia

Research interests

  • Governance and risk management of cyber security

  • Governance and risk management of Artificial Intelligence

  • Internal auditing and assurance

Works

Search Professor Sergeja Slapnicar’s works on UQ eSpace

92 works between 2000 and 2026

1 - 20 of 92 works

2026

Newspaper Article

Moving from heat maps to dollars: a guide to financial cyberrisk quantification

Slapničar, Sergeja, Joshi, Chaitanya and Žust, Uroš (2026, 10 28). Moving from heat maps to dollars: a guide to financial cyberrisk quantification ISACA journal

Moving from heat maps to dollars: a guide to financial cyberrisk quantification

2026

Newspaper Article

From parallel to integrated cyber risk assurance

Čular, Marko, Drašček, Matej, Slapničar, Sergeja and Vuko, Tina (2026, 10 20). From parallel to integrated cyber risk assurance Institute of Internal Auditors Singapore Newsletter

From parallel to integrated cyber risk assurance

2026

Journal Article

Which factors improve organizational cyber resilience?

Tsen, Elinor, Ko, Ryan KL and Slapničar, Sergeja (2026). Which factors improve organizational cyber resilience?. Journal of Organizational Computing and Electronic Commerce, 36 (4), 1-30. doi: 10.1080/10919392.2026.2736896

Which factors improve organizational cyber resilience?

2026

Conference Publication

Governing the ungovernable: epistemic opacity of AI and improvisational accountability

Dessalegn, Mihret, Slapničar, Sergeja and Drašček, Matej (2026). Governing the ungovernable: epistemic opacity of AI and improvisational accountability. 3rd International Conference on Auditing and AI, Duisburg, Germany, 3 - 4 September 2026.

Governing the ungovernable: epistemic opacity of AI and improvisational accountability

2026

Conference Publication

Internal auditor’s assurance of Artificial Intelligence: Its enablers and a risk mitigation pathway

Slapničar, Sergeja, Vuko, Tina, Mihret, Dessalegn and Drašček, Matej (2026). Internal auditor’s assurance of Artificial Intelligence: Its enablers and a risk mitigation pathway. 11th Workshop in Audit Quality, Cagliari, Italy, 25 - 26 September 2026. Online: Association Research on Audit Quality.

Internal auditor’s assurance of Artificial Intelligence: Its enablers and a risk mitigation pathway

2026

Journal Article

The FABRICS framework: a Bayesian approach to financial quantification of cyber risk

Slapničar, Sergeja and Joshi, Chaitanya (2026). The FABRICS framework: a Bayesian approach to financial quantification of cyber risk. Computers and Security, 167 104900, 1-18. doi: 10.1016/j.cose.2026.104900

The FABRICS framework: a Bayesian approach to financial quantification of cyber risk

2026

Journal Article

A rising tide of operational risk: new directions for management control research on core and novel risks

Oelrich, Sebastian and Slapničar, Sergeja (2026). A rising tide of operational risk: new directions for management control research on core and novel risks. Journal of Management Control, 37 (2), 285-294. doi: 10.1007/s00187-026-00418-y

A rising tide of operational risk: new directions for management control research on core and novel risks

2026

Conference Publication

Does cybersecurity disclosure regulation reduce cyber risk? Evidence from the 2023 SEC Rule

Neumann, Alexander, Slapničar, Sergeja and Ragunathan, Vanitha (2026). Does cybersecurity disclosure regulation reduce cyber risk? Evidence from the 2023 SEC Rule. 48th Annual Congress of the European Accounting Association (EAA), Prague, Czechia, 27-29 May 2026. Online: European Accounting Association.

Does cybersecurity disclosure regulation reduce cyber risk? Evidence from the 2023 SEC Rule

2026

Journal Article

Collaborating across boundaries: toward an integrated cyber risk assessment by internal auditors and cybersecurity professionals

Slapničar, Sergeja, Vuko, Tina, Čular, Marko and Drašček, Matej (2026). Collaborating across boundaries: toward an integrated cyber risk assessment by internal auditors and cybersecurity professionals. Contemporary Accounting Research, 43 (2), 1034-1063. doi: 10.1111/1911-3846.70052

Collaborating across boundaries: toward an integrated cyber risk assessment by internal auditors and cybersecurity professionals

2025

Journal Article

The effect of organizational cyber resilience on cyber incident outcomes

Tsen, Elinor, Ko, Ryan K. L. and Slapnicar, Sergeja (2025). The effect of organizational cyber resilience on cyber incident outcomes. Journal of Cybersecurity, 11 (1) tyaf040, 1-15. doi: 10.1093/cybsec/tyaf040

The effect of organizational cyber resilience on cyber incident outcomes

2025

Journal Article

Cyber risk management: an illusion of a risk-based approach

Slapničar, Sergeja, Axelsen, Micheal and Eulerich, Marc (2025). Cyber risk management: an illusion of a risk-based approach. Journal of Management Control, 37 (2), 359-394. doi: 10.1007/s00187-025-00401-z

Cyber risk management: an illusion of a risk-based approach

2025

Journal Article

Optimizing supplier cyberrisk assessment

Slapnicar, Sergeja and Vidmar, Tim (2025). Optimizing supplier cyberrisk assessment. ISACA journal, 5 (2025).

Optimizing supplier cyberrisk assessment

2025

Journal Article

Process Theory of Supplier Cyber Risk Assessment

Slapnicar, Sergeja, Vidmar, Tim and Tsen, Elinor (2025). Process Theory of Supplier Cyber Risk Assessment. Australasian Journal of Information Systems, 29 (2), 1-33. doi: 10.3127/ajis.v29.5323

Process Theory of Supplier Cyber Risk Assessment

2025

Journal Article

Contrasting the optimal resource allocation to cybersecurity controls and cyber insurance using prospect theory versus expected utility theory

Joshi, Chaitanya, Slapničar, Sergeja, Yang, Jinming and Ko, Ryan (2025). Contrasting the optimal resource allocation to cybersecurity controls and cyber insurance using prospect theory versus expected utility theory. Computers and Security, 154 104450, 1-14. doi: 10.1016/j.cose.2025.104450

Contrasting the optimal resource allocation to cybersecurity controls and cyber insurance using prospect theory versus expected utility theory

2025

Conference Publication

Divergent cyber risk assessment by information security managers and internal auditors: Irreconcilable differences or complementary layers?

Slapnicar, Sergeja, Vuko, Tina, Cular, Marko and Drascek, Matej (2025). Divergent cyber risk assessment by information security managers and internal auditors: Irreconcilable differences or complementary layers?. European Accounting Association Congress, Rome, Italy, 28-30 May 2025. European Accounting Association.

Divergent cyber risk assessment by information security managers and internal auditors: Irreconcilable differences or complementary layers?

2025

Conference Publication

Divergent cyber risk assessment by information security managers and internal auditors: Irreconcilable differences or complementary layers?

Slapničar, S., Vuko, T., Čular, M. and Drašček, M. (2025). Divergent cyber risk assessment by information security managers and internal auditors: Irreconcilable differences or complementary layers?. European Accounting Association Congress, Rome, Italy, 28-30 May 2025. European Accounting Association.

Divergent cyber risk assessment by information security managers and internal auditors: Irreconcilable differences or complementary layers?

2024

Journal Article

Cybersecurity assurance

Drašček, Matej, Slapničar, Sergeja, Vuko, Tina and Čular, Marko (2024). Cybersecurity assurance. Internal Auditor, 20-22.

Cybersecurity assurance

2024

Journal Article

Key drivers of cybersecurity audit effectiveness: A neo-institutional perspective

Vuko Tina, Slapničar Sergeja, Čular Marko and Matej Drašček (2024). Key drivers of cybersecurity audit effectiveness: A neo-institutional perspective. International Journal of Auditing, 29 (1), 188-206. doi: 10.1111/ijau.12365

Key drivers of cybersecurity audit effectiveness: A neo-institutional perspective

2024

Journal Article

The three lines model in cybersecurity governance and risk management

Bongiovanni, Ivano, Slapničar, Sergeja, Axelsen, Micheal and Stockdale, David (2024). The three lines model in cybersecurity governance and risk management. ISACA Journal, 1 (2024).

The three lines model in cybersecurity governance and risk management

2023

Journal Article

A pathway model to five lines of accountability in cybersecurity governance

Slapničar, Sergeja, Axelsen, Micheal, Bongiovanni, Ivano and Stockdale, David (2023). A pathway model to five lines of accountability in cybersecurity governance. International Journal of Accounting Information Systems, 51 100642, 100642. doi: 10.1016/j.accinf.2023.100642

A pathway model to five lines of accountability in cybersecurity governance

Supervision

Availability

Associate Professor Sergeja Slapnicar is:
Available for supervision

Looking for a supervisor? Read our advice on how to choose a supervisor.

Supervision history

Current supervision

  • Doctor Philosophy

    CEO early-life experiences and corporate environmental orientation

    Principal Advisor

    Other advisors: Dr Ihtisham Malik

  • Doctor Philosophy

    Integrating Business Intelligence in Exploring Decision Biases in Competitor Analysis within Strategic Management Accounting

    Principal Advisor

    Other advisors: Dr Michael Turner

  • Doctor Philosophy

    Behavioural Biases in Cyber-Risk Assessment and Belief Updating: An Experimental Economics Approach

    Principal Advisor

    Other advisors: Professor Lionel Page

Completed supervision

Media

Enquiries

For media enquiries about Associate Professor Sergeja Slapnicar's areas of expertise, story ideas and help finding experts, contact our Media team:

communications@uq.edu.au