A Research on Security Education Framework for Employee’s Behavior Change

Abstract

Abstract-The development of information technology has a positive impact on business environment and at the same time, a negative impact on various security threats. Organizations try to implement various countermeasures for preventing security incident. However they tend to rely on technical security solution and security incidents are not possible to prevent completely. Recently, People Centric Security as a new approach has become an issue and the security education for changing the behavior of employees is emphasized. However, most organizations have difficulty in expecting any changes in behavior of employees because security education regards as a formal activity for compliance. Moreover, few previous security education-related researches studied the relevance of the educational contents necessary for employees with the behavioral changes in students and security experts. The purpose of this research is to provide security education framework for employee's behavior change based on pedagogy and social psychology. In addition, some future researches that overcome the limitation of this research for effective security education program were proposed.Index Terms-Security education, social psychology, people centric security.