RT Book T1 A MODEL FOR EVALUATING INFORMATION SECURITY WITH A FOCUS ON THE USER A1 Costa, Ana Paula Cabral Seixas A1 Silva, Lucio A1 Menezes, Silvio A2 Silva, Lucio A2 Menezes, Silvio LA English YR 2012 UL https://krimdok.uni-tuebingen.de/Record/1866148605 AB This study presents a theoretical model to evaluate the level of information security in an organizational environment with a focus on the knowledge, attitudes and behaviour of the end user, identifying the level and origin of the gap between the information security guidelines laid down by the company and the actual practices of its internal staff, third party partners and suppliers. The model is designed to assist in meeting the objectives and policies set for the management of information security by senior management, and contributes to maintaining an effective program of training and in raising awareness on information security