The Potentials of Dynamic Platform Modelling in Public Administration

Nemeslaki, András; Somogyi, Róbert; Aslan, Fatma; Halouel, Chourouk

doi:10.1145/3551504.3551553

Cited by 1 publication

(1 citation statement)

References 12 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…(2014) draws attention to the fact that effective security awareness programs (SAPs) depend on several behavioral influencing factors. Nemeslaki and Sasvári (2015) differentiate between and discuss the three dimensions of ISA: the organizational, infrastructural and individual dimensions. Siponen (2000) begins his study by reconfiguring the doctrines of awareness into a framework via their parts.…”

Section: Theoretical Backgroundmentioning

confidence: 99%

Information security awareness maturity: conceptual and practical aspects in Hungarian organizations

Kő¹,

Tarján²,

Mitev³

2023

ITP

View full text Add to dashboard Cite

PurposeThis paper aims to provide a maturity model for information security awareness (MMISA), based on the literature, expert interviews and feedback. In addition to developing the MMISA, the authors investigate the role of the three decisive factors that affect ISA maturity level: risk management mechanism, organizational structure and ISA.Design/methodology/approachThe research methodology is a combined one; qualitative and quantitative methods were applied, including surveying the literature, interviews and developing a survey to collect quantitative data about decisive factors that affect ISA maturity level. The authors perform a variance-based partial least squares-structural equation modeling (PLS-SEM) investigation of the relationships between these factors.FindingsThe investigation of decisive factors of ISA maturity levels revealed that if the authors identify a strong risk assessment mechanism (through a documented methodology and reliable results), the authors can expect a high level of ISA. If there is a well-defined organizational structure with clear responsibilities, this supports the linking of a risk management mechanism with the level of ISA. The connection between organizational structure and ISA maturity level is supported by ISA activities: an increased level of awareness actions strengthens an organizational structure via the best practices learned by the staff.Originality/valueThe main contribution of the proposed MMISA model is that the model offers controls and audit evidence for maturity levels. Beyond that, the authors distinguish in the MMISA model controls supporting knowledge and controls supporting attitude, emphasizing that this is not enough to know what to do, but the proper attitude is required too. The authors didn't find any other ISA maturity model which has a similar feature. The contribution of the authors' work is that the authors provide a method for solving this complex measurement problem via the MMISA, which also offers direct guidance for the daily practices of organizations.

show abstract

Section: Theoretical Backgroundmentioning

confidence: 99%