Cyber Hygiene: The Big Picture

Maennel, Kaie; Mäses, Sten; Maennel, Olaf

doi:10.1007/978-3-030-03638-6_18

Cited by 21 publications

(13 citation statements)

References 42 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…This sense of obligation can be promoted by increasing individuals' awareness of their ICT and related ethical responsibilities (Vallor and Rewak, 2018). Students at universities are also subject to ICT policies and are recognised as a particularly vulnerable cohort of users due to a lack of good cyber hygiene practices (Garrison and Posey, 2006;Maennel et al, 2018;Smith, 2018). Introducing better-informed ICT policy as curriculum at the university can boost students' compliance towards usage of ICT resources and improve cybersecurity knowledge (Neigel et al, 2020).…”

Section: Background Literature and Research Questionsmentioning

confidence: 99%

“…This sense of obligation can be promoted by increasing individuals’ awareness of their ICT and related ethical responsibilities (Vallor and Rewak, 2018). Students at universities are also subject to ICT policies and are recognised as a particularly vulnerable cohort of users due to a lack of good cyber hygiene practices (Garrison and Posey, 2006; Maennel et al. , 2018; Smith, 2018).…”

Section: Background Literature and Research Questionsmentioning

confidence: 99%

See 1 more Smart Citation

The influence of ethical principles and policy awareness priming on university students’ judgements about ICT code of conduct compliance

Richards

Khan²,

Formosa³

et al. 2022

OCJ

View full text Add to dashboard Cite

PurposeTo protect information and communication technology (ICT) infrastructure and resources against poor cyber hygiene behaviours, organisations commonly require internal users to confirm they will abide by an ICT Code of Conduct. Before commencing enrolment, university students sign ICT policies, however, individuals can ignore or act contrary to these policies. This study aims to evaluate whether students can apply ICT Codes of Conduct and explores viable approaches for ensuring that students understand how to act ethically and in accordance with such codes.Design/methodology/approachThe authors designed a between-subjects experiment involving 260 students’ responses to five scenario-pairs that involve breach/non-breach of a university’s ICT policy following a priming intervention to heighten awareness of ICT policy or relevant ethical principles, with a control group receiving no priming.FindingsThis study found a significant difference in students’ responses to the breach versus non-breach cases, indicating their ability to apply the ICT Code of Conduct. Qualitative comments revealed the priming materials influenced their reasoning.Research limitations/implicationsThe authors’ priming interventions were inadequate for improving breach recognition compared to the control group. More nuanced and targeted priming interventions are suggested for future studies.Practical implicationsAppropriate application of ICT Code of Conduct can be measured by collecting student/employee responses to breach/non-breach scenario pairs based on the Code and embedded with ethical principles.Social implicationsShared awareness and protection of ICT resources.Originality/valueCompliance with ICT Codes of Conduct by students is under-investigated. This study shows that code-based scenarios can measure understanding and suggest that targeted priming might offer a non-resource intensive training approach.

show abstract

Section: Background Literature and Research Questionsmentioning

confidence: 99%

Section: Background Literature and Research Questionsmentioning

confidence: 99%

The influence of ethical principles and policy awareness priming on university students’ judgements about ICT code of conduct compliance

Richards

Khan²,

Formosa³

et al. 2022

OCJ

View full text Add to dashboard Cite

show abstract

“…At the same time, cyber hygiene is a broad term that illustrates components to promote good cyber hygiene at all levels [9], and [8]. Other also use the term in the training context, to train the workforce to guard against common errors and attacks leading to cyber intrusion [4], and [10].…”

Section: Cyber Hygienementioning

confidence: 99%

Best Practices Used by Businesses to Maintain Good Cyber Hygiene During Covid19 Pandemic

Ncubukezi¹,

Mwansa²

2021

JITST

View full text Add to dashboard Cite

Businesses using cyberspace are expanding every day, with Internet users performing different activities affecting cyber hygiene. The user's actions may be good or badultimately determining the state of cyber hygiene. Good cybersecurity hygiene requires a thorough implementation of the best practices to improve safety and protect information or resources, while bad practices lead to data corruption, loss and breaches. Compromised cyber hygiene is the result of exposure to various cyberattacks. Our paper reports the best practices used by different business sectors to maintain cyber hygiene. The study used a qualitative survey mounted on google with 20 business owners and Information Technology managers. We explored the use of best practices to understand business experiences in reducing and avoiding cyber-attacks and improve cyber health. We analyzed the collected data and presented the findings. Cyber essentials have been recommended as the guideline to mitigate cyber risks.

show abstract

“…Depicting cyber hygiene as the online analogue of personal hygiene, the campaign suggested that preventative measures can be used to mitigate cybercrime incidents much like hand washing prevents the spread of disease. Maennel et al (2018) defines cyber hygiene as “a set of practices aiming to protect from negative impact to the assets from cyber security related risks” (p. 1). Embedded within this definition is emphasis on the human factor in risk reduction.…”

Section: Literature Reviewmentioning

confidence: 99%

A Routine Activities Approach to Evidence-Based Risk Assessment: Findings From Two Simulated Phishing Attacks

Maimon

Howell

Perkins

et al. 2021

Social Science Computer Review

View full text Add to dashboard Cite

To assess the efficacy of routine activity theory (RAT) for explaining phishing victimization and guide evidence-based policy, we launched two phishing attacks via a university Listserv ( N = 25,875). The first email offered access to a pdf file; the second offered free concert tickets. Several interesting findings emerged demonstrating phishing victimization results from network users’ routine behaviors. Students were significantly less likely to open the phishing email sharing a pdf but more likely to open the email offering free concert tickets. Moreover, students were mor e likely to click the malicious link embedded within the phishing email in both studies, often using mobile devices. Conversely, employees were more likely to click the link while connected to the university network, thus exposing the network to greater levels of risk. Finally, the email offering concert tickets was opened at a frequency more than double the email containing the pdf. Theoretical and policy implications are discussed.

show abstract

Cyber Hygiene: The Big Picture

Cited by 21 publications

References 42 publications

The influence of ethical principles and policy awareness priming on university students’ judgements about ICT code of conduct compliance

The influence of ethical principles and policy awareness priming on university students’ judgements about ICT code of conduct compliance

Best Practices Used by Businesses to Maintain Good Cyber Hygiene During Covid19 Pandemic

A Routine Activities Approach to Evidence-Based Risk Assessment: Findings From Two Simulated Phishing Attacks

Contact Info

Product

Resources

About