Forming the Awareness of Employees in the Field of Information Security

Abstract

Research purpose: The aim of this study is to present the essence and importance of information security awareness in the organisation and to analyse selected methods used in forming employee awareness in terms of information security. Methodology/ approach:This paper is based on literature studies and available reports. Findings:The presented paper suggests that in order to create a positive change in the organisation, information security training should focus on the attitude and behavior of employees. Concentration is primarily about what they do and how their actions affect the results. In order to minimise the risk of data breaches, often resulting from human error, training methods must meet the needs of today's employees. Effective information security awareness strategies should address the needs of both the organisation itself and the learning people. Limitations/implications:The study is based on the theoretical analysis, indicating the need of conducting further empirical research. Originality/value:The main value of the study is to clarify the need for forming employees' awareness of information security, while indicating a number of available methods enabling the implementation of awareness programs in the organisation.

End-User Perceptions on Information Security

“…The rapid development and transformation of information technologies and its use has resulted in a rise in security issues and breaches across the globe (Chmura, 2017). In the Global Information Security Survey conducted by Ernst &Young (EY), it was consistently found that the biggest security vulnerability is lack of awareness by employees (end-users) (EY, 2017).…”