A MODEL FOR EVALUATING INFORMATION SECURITY WITH A FOCUS ON THE USER

This study presents a theoretical model to evaluate the level of information security in an organizational environment with a focus on the knowledge, attitudes and behaviour of the end user, identifying the level and origin of the gap between the information security guidelines laid down by the comp...

Full description

Saved in:  
Bibliographic Details
Authors: Costa, Ana Paula Cabral Seixas (Author) ; Silva, Lucio (Author) ; Menezes, Silvio (Author)
Format: Electronic Book
Language:English
Published: 2012
In:Year: 2012
Online Access: Volltext (kostenfrei)
Check availability: HBZ Gateway
Description
Summary:This study presents a theoretical model to evaluate the level of information security in an organizational environment with a focus on the knowledge, attitudes and behaviour of the end user, identifying the level and origin of the gap between the information security guidelines laid down by the company and the actual practices of its internal staff, third party partners and suppliers. The model is designed to assist in meeting the objectives and policies set for the management of information security by senior management, and contributes to maintaining an effective program of training and in raising awareness on information security