A Holistic Information Security Management Framework for Home Users

Abstract

A wide range of information communication technologies (ICTs), including devices such as smart phones, tablets, desktops and smart TVs, are increasingly used at home. Home users arguably struggle with managing and handling different devices and operating systems, applying different security configurations and mitigating different security threats. This research investigates current online awareness tools and reviews studies which try to enhance cybersecurity awareness and education among the home users. The analysis reveals that most studies have made efforts in proposing "one-fits-all" solutions that do not have the ability to provide the users with a tailored awareness content based on some criteria such as the current needs, prior knowledge, and security priorities for each user. This review indicates that there is a need for an approach that can provide the users with bespoke awareness information. As an initial approach to achieve this goal, a holistic information security management framework for home users is proposed which can provide users with bespoke awareness information by applying different groups of information security policies based on the technologies, applications, and services which are used.

A novel approach for improving information security management and awareness for home environments

“…The proposed approach seeks to unify the multi-device, multi-platform and pervasive threat environment into a usable single homeuser security information manager by mapping complex security requirements in an adaptable manner; being mindful of technologies, services and people. several initial interfaces were deigned and evaluated by 434 participants in our previous work (Alotaibi et al, 2019). Those findings were used to develop the framework and a mock-up design was developed base to simulate the proposed framework to show different interactions with different components and sections in order to visualise the main concepts and functions which can be performed when it is deployed in a real environment.…”