A Conceptual Framework for Information Security Awareness, Assessment, and Training

Hassanzadeh, Mohammad; Jahangiri, Narges; Brewster, Ben

Abstract

Information security has become a key issue. Human resources, including all people working with information technology, play a significant role in information security issues. The key factor for human resources in relation to information security is awareness about threats, challenges, and risks lurking in the information exchange environment. Improving staff awareness of information security should be one of the significant, permanent goals in an organization's information security policies. This chapter investigates information security awareness in terms of knowledge, attitude, and behavior. Research was carried out using a survey method. To evaluate the information security awareness of staff, we developed nine components. Seven independent variables-gender, education level, IT awareness, working experience, occupation, field, and job category-were also selected for developing the conceptual model. Results showed that, among the investigated variables, gender, IT awareness, occupation field, and job category had significant correlations to information security awareness. © 2014 Elsevier Inc. All rights reserved.

Citation

Hassanzadeh, M., Jahangiri, N., & Brewster, B. (2014). A Conceptual Framework for Information Security Awareness, Assessment, and Training. In H. R. Arabnia, & B. Akhgar (Eds.), Emerging Trends in ICT Security (99-110). Elsevier. https://doi.org/10.1016/B978-0-12-411474-6.00006-2

• Online Publication Date: Nov 8, 2013
• Publication Date: 2014
• Deposit Date: Jan 21, 2020
• Pages: 99-110
• Book Title: Emerging Trends in ICT Security
• Chapter Number: 6
• ISBN: 9780124114746
• DOI: https://doi.org/10.1016/B978-0-12-411474-6.00006-2
• Public URL: https://nottingham-repository.worktribe.com/output/3774926
• Publisher URL: https://www.sciencedirect.com/science/article/pii/B9780124114746000062