ALL libraries (COBIB.SI union bibliographic/catalogue database)
PDF
  • Know your enemy [Elektronski vir] : user segmentation based on human aspects of information security
    Fujs, Damjan ; Vrhovec, Simon ; Vavpotič, Damjan
    Users of information systems are the weakest link in information security. Considering their current information security performance is essential for improving information security training. User ... segmentation can help to improve information security training by dividing users into smaller groups based on their information security performance. In this paper, we present a segmented approach for information security training of users. To test the approach, we used data collected from students at a Slovenian university (N=165) with the Human Aspects of Information Security Questionnaire (HAIS-Q). HAIS-Q data was used to divide users into groups according to their information security performance via clustering. The proposed approach inherently balances adaptation of training to the needs of users and the efforts needed to achieve it which maximizes the key benefits of existing information security training approaches. With improved personalization, it mitigates the challenges related to training boringness and lack of user motivation which are emblematic for traditional information security training approaches. The proposed approach also offers some fexibility regarding the degree of personalization and the efforts related to information security training by fine-tuning the number of user groups. Finally, the proposed approach can help to identify benficial software security requirements during development of new information systems.
    Source: IEEE access [Elektronski vir]. - ISSN 2169-3536 (Vol. 9, 2021, str. 157306-157315)
    Type of material - e-article ; adult, serious
    Publish date - 2021
    Language - english
    COBISS.SI-ID - 86508803

    Link(s):

    https://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=9623526
    DOI

Shelf entry