Mitigating Information Security Risks By Increasing User Security Awareness: A Case Study Of An Information Security Awareness System

機構典藏 > College of Business and Management > Graduate Institute & Department of Information Management > Journal Article > Item 987654321/68556

Please use this identifier to cite or link to this item: https://tkuir.lib.tku.edu.tw/dspace/handle/987654321/68556

Title:	Mitigating Information Security Risks By Increasing User Security Awareness: A Case Study Of An Information Security Awareness System
Authors:	Chen, Charlie C;Shaw, R. S.;Yang, Samuel C.
Contributors:	淡江大學資訊管理學系
Keywords:	Studies;Network security;Insurance industry;Systems development;Corporate culture
Date:	2006
Issue Date:	2011-10-23 13:16:18 (UTC+8)
Publisher:	New York: Organizational Systems Research Association
Abstract:	Organizations that lack security awareness can miss detecting many obvious security risks such as Trojans, phishing, viruses, and intellectual property theft in their daily activities. This lack of awareness can render sophisticated Internet security technologies useless and expose the organization to enormous risks. This paper adopts the systems development research methodology to investigate the security awareness needs of an insurance company that has an e-business presence. A pilot of a security awareness system was constructed for this investigative purpose. Various managers in the organization took part in the study. The pilot system was fine-tuned based on the usage experiences and feedback of participants. The findings indicate that the architecture of an information security awareness system needs to provide effective system management components that allow a system manager to customize the system interface in order to meet individual needs. In addition, the system itself needs to provide different functions such as an information portal, newsgroups, discussion forums, histories of security breach events, security awareness activities, and quality articles to facilitate the transmission of awareness concepts. The results of this study provide important lessons for organizations that plan to implement an effective information security awareness system.
Relation:	Information Technology, Learning, and Performance Journal 24(1), pp.1-14
Appears in Collections:	[Graduate Institute & Department of Information Management] Journal Article

Files in This Item:

File	Size	Format
index.html	0Kb	HTML	233	View/Open
index.html	0Kb	HTML	44	View/Open
Mitigating Information Security Risks By Increasing User Security Awareness A Case Study Of An Information Security Awareness System.pdf	186Kb	Adobe PDF	0	View/Open

Loading...