A MODEL FOR EVALUATING INFORMATION SECURITY WITH A FOCUS ON THE USER

This study presents a theoretical model to evaluate the level of information security in an organizational environment with a focus on the knowledge, attitudes and behaviour of the end user, identifying the level and origin of the gap between the information security guidelines laid down by the comp...

Ausführliche Beschreibung

Gespeichert in:  
Bibliographische Detailangaben
VerfasserInnen: Costa, Ana Paula Cabral Seixas (VerfasserIn) ; Silva, Lucio (VerfasserIn) ; Menezes, Silvio (VerfasserIn)
Medienart: Elektronisch Buch
Sprache:Englisch
Veröffentlicht: 2012
In:Jahr: 2012
Online-Zugang: Volltext (kostenfrei)
Verfügbarkeit prüfen: HBZ Gateway
Beschreibung
Zusammenfassung:This study presents a theoretical model to evaluate the level of information security in an organizational environment with a focus on the knowledge, attitudes and behaviour of the end user, identifying the level and origin of the gap between the information security guidelines laid down by the company and the actual practices of its internal staff, third party partners and suppliers. The model is designed to assist in meeting the objectives and policies set for the management of information security by senior management, and contributes to maintaining an effective program of training and in raising awareness on information security