A baseline for information security knowledge for end users

Boshoff, Ryno

Title: A baseline for information security knowledge for end users
Creator: Boshoff, Ryno
Subject: Data protection -- Management
Subject: Computer security -- Management
Date Issued: 2012
Date: 2012
Type: Thesis
Type: Masters
Type: MTech
Identifier: vital:9808
Identifier: http://hdl.handle.net/10948/d1013260
Description: Information plays a vast contributing role to all resources within an organisation. Organisations should recognise the importance of information and implement information security controls to protect their information as this will ensure that the organisation‟s information retains its confidentiality, integrity and availability. Information security controls, which are the means of managing information risks, rely heavily on the user‟s knowledge regarding the use of these controls for their effectiveness, and as such, users should be educated in order to maximise effectiveness of these controls. Current information security educational programmes are created without necessarily taking into account the target audience, who comprises of all employees, stakeholders, suppliers, third parties, customers or other external parties or third party that requires access to the organisation‟s information. This results in programmes that are not linguistically appropriate; or that present knowledge at an inappropriate level for the target audience. This could leave users bored or confused, without successfully changing their behaviour or improving knowledge. This dissertation identifies a baseline for information security knowledge targeted at end users. This was done by means of a Delphi Study, where a profile of “generic” end users comprised of information security topics and concepts were rated by experts from the field of information security education. This resulted in the elimination of inappropriate topics and concepts and retaining the relevant and appropriate aspects. This baseline for information security knowledge can be characterised as a minimum standard that everybody should be educated on as an introductory or refresher course. This can also serve as the foundation phase to educate end users with knowledge of the basic topics and concepts to enable them to fulfil their responsibilities in order to protect information. If needed, topics and concepts could be added to the baseline for information security knowledge for specialised target audiences (e.g. specialised End Users, ICT Staff or Top Management).
Format: ix, 232 leaves
Format: pdf
Publisher: Nelson Mandela Metropolitan University
Publisher: Faculty of Engineering, the Built Environment and Information Technology
Language: English
Rights: Nelson Mandela Metropolitan University

Hits: 2156
Visitors: 2169
Downloads: 74

Collections

NMMU School of Information and Communication Technology

		Thumbnail	File	Description	Size	Format
View Details Download			SOURCEPDF	PDF	15 MB	Adobe Acrobat PDF	View Details Download