Security awareness

Security awareness poster from World War II.
An equivalent 2000 warning about the web security awareness.

Security awareness is the knowledge and attitude members of an organization possess regarding the protection of the physical, and especially informational, assets of that organization. However, it is very tricky to implement because organizations are not able to impose such awareness directly on employees as there are no ways to explicitly monitor people’s behavior. That being said, the literature does suggest several ways that such security awareness could be improved.[1] Many organizations require formal security awareness training[2] for all workers when they join the organization and periodically thereafter, usually annually.[3] Another main force that is found to have a strong correlation with employees’ security awareness is managerial security participation. It also bridges security awareness with other organizational aspects.[4]

  1. ^ Hwang, Inho; Wakefield, Robin; Kim, Sanghyun; Kim, Taeha (2021-07-04). "Security Awareness: The First Step in Information Security Compliance Behavior". Journal of Computer Information Systems. 61 (4): 345–356. doi:10.1080/08874417.2019.1650676. ISSN 0887-4417.
  2. ^ Maritime Security Awareness Training
  3. ^ Assenza, G. (2019). "A Review of Methods for Evaluating Security Awareness Initiatives". European Journal for Security Research. 5 (2): 259–287. doi:10.1007/s41125-019-00052-x. S2CID 204498135.
  4. ^ Hwang, Inho; Wakefield, Robin; Kim, Sanghyun; Kim, Taeha (2021-07-04). "Security Awareness: The First Step in Information Security Compliance Behavior". Journal of Computer Information Systems. 61 (4): 345–356. doi:10.1080/08874417.2019.1650676. ISSN 0887-4417.