Cybersecurity education, awareness raising, and training initiatives: National level evidence-based results, challenges, and promise

Shillair, Ruth; Esteve‐González, Patricia; Dutton, William H.; Creese, Sadie; Nagyfejeo, Eva; Solms, Basie von

doi:10.1016/j.cose.2022.102756

Cited by 17 publications

(9 citation statements)

References 27 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…, 2022) demonstrate a positive correlation with employees’ compliance with information security policies (Karlsson et al. , 2022; Sharma and Aparicio, 2022). An organizational information security environment has a positive impact on employees’ behavior intention (Ifinedo, 2018; Tam et al.…”

Section: Resultsmentioning

confidence: 98%

“…Strengthening support from top management. The influence of senior management on cybersecurity is notably significant (Shillair et al, 2022). In addition, trust in supervisors exerts a substantial influence on employees' compliance behavior (Xu and Mahenthiran, 2021).…”

Section: Discussionmentioning

confidence: 99%

“…Leadership is reviewed as the fourth subtheme. Cyber threats are highly impacted by senior management (Shillair et al, 2022). Empirical evidence suggests that top management support reduces the impact of institutional pressures on the organization's overall cybersecurity strategy (Ogbanufe et al, 2021), increases cybersecurity maturity (Kumar et al, 2021;Heymann et al, 2022;Loonam et al, 2022) and has a noteworthy influence on a company's information security performance (Mukundan and Prakash Sai, 2014;Atmojo et al, 2019;Klju cnikov et al, 2019;Shaikh and Siponen, 2023).…”

Section: Thematic Framework Of Cybersecuritymentioning

confidence: 99%

See 2 more Smart Citations

Building a thematic framework of cybersecurity: a systematic literature review approach

Khaw,

Amran,

Teoh

2024

JSIT

View full text Add to dashboard Cite

Purpose This paper aims to explore the factors affecting cybersecurity implementation in organizations in various countries and develop a cybersecurity framework to improve cybersecurity practices within organizations for cybersecurity risk management through a systematic literature review (SLR) approach. Design/methodology/approach This SLR adhered to RepOrting Standards for Systematics Evidence Syntheses (ROSES) publication standards and used various research approaches. The study’s article selection process involved using Scopus, one of the most important scientific databases, to review articles published between 2014 and 2023. Findings This review identified the four main themes: individual factors, organizational factors, technological factors and governmental role. In addition, nine subthemes that relate to these primary topics were established. Originality/value This research sheds light on the multifaceted nature of cybersecurity by exploring factors influencing implementation and developing an improvement framework, offering valuable insights for researchers to advance theoretical developments, assisting industry practitioners in tailoring cybersecurity strategies to their needs and providing policymakers with a basis for creating more effective cybersecurity regulations and standards.

show abstract

Section: Resultsmentioning

confidence: 98%

Section: Discussionmentioning

confidence: 99%

Section: Thematic Framework Of Cybersecuritymentioning

confidence: 99%

See 1 more Smart Citation

Building a thematic framework of cybersecurity: a systematic literature review approach

Khaw,

Amran,

Teoh

2024

JSIT

View full text Add to dashboard Cite

show abstract

“…Second, the findings in this study come from data collected in the USA, but future research should examine the extent to which these findings are consistent on a cross-national level. Recent research has found that wealthier countries are more likely to invest in cyber education (Shillair et al , 2022), but countries vary on a number of other dimensions – such as the structure of the labor market, access to education, the distribution of resources and government outreach efforts – that may shed light on the nature and distribution of information security awareness across countries and citizens and how gaps in information security awareness can be addressed.…”

Section: Discussionmentioning

confidence: 99%

Informational inequality: the role of resources and attributes in information security awareness

Lyon

2023

ICS

View full text Add to dashboard Cite

Purpose The rapid expansion of internet usage and device connectivity has underscored the importance of understanding the public’s cyber behavior and knowledge. Despite this, there is little research that examines the public’s objective knowledge of secure information security practices. The purpose of this study is to examine how objective cyber awareness is distributed throughout society. Design/methodology/approach This study draws on a large national survey of adults to examine the relationship between individual factors – such as demographic attributes and socioeconomic resources – and information security awareness. The study estimates several statistical models using weighted logistic regression to model objective information security awareness. Findings The results indicate that socioeconomic resources such as income and education have a significant effect on individuals’ information security awareness with richer and more highly educated individuals exhibiting greater awareness of important security practices and tools. Additionally, age and gender represent consistent and clear informational gaps in society as older individuals and females are significantly less knowledgeable about an array of information security practices than younger individuals and males, respectively. Social implications The findings have important implications for our understanding of information security behavior and user vulnerability in an increasingly digital and connected society. Despite the growing importance of cybersecurity for all individuals in nearly all domains of daily life, there is substantial inequality in awareness about secure cyber practices and the tools and techniques used to protect one’s self from attacks. While digital technology will continue to permeate many aspects of daily life – from financial transactions to health services to social interactions – the findings here indicate that some users may be far more exposed and vulnerable to attack than others. Originality/value This study contributes to our understanding of general user information security awareness using a large survey and statistical models to generalize about the public’s information security awareness across multiple domains and stimulates future research on public knowledge of information security. The findings indicate that some users may be far more exposed and vulnerable to attack than others. Despite the growing importance of cybersecurity for all individuals in nearly all domains of daily life, there is substantial inequality in awareness about secure cyber practices and the tools and techniques used to protect one’s self from attacks.

show abstract

“…The construct of "organizational culture" was measured using three items primarily sourced from the work of Dobni [74], Zhang et al [75], and Azanza et al [76]. Organizational cybersecurity training and policies were gauged with six items drawn from Zwilling et al [16], Wang et al [50], and Shillair et al [77]. For assessing "regulatory effectiveness and government policies", three items were employed based on the studies by Srinivas et al [78], and Wang et al [50].…”

Section: Survey Instrumentsmentioning

confidence: 99%

Organizational Cybersecurity Systems and Sustainable Business Performance of Small and Medium Enterprises (SMEs) in Saudi Arabia: The Mediating and Moderating Role of Cybersecurity Resilience and Organizational Culture

Al-Somali,

Saqr,

Asiri

et al. 2024

Sustainability

View full text Add to dashboard Cite

Cybersecurity challenges in Saudi Arabia’s service and manufacturing sectors are escalating due to increased digital adoption, highlighting the need for robust security measures and awareness in SMEs. Therefore, this research is significant due to the increasing reliance on digital technologies and the unique cybersecurity challenges faced by SMEs in these vital economic sectors. With rapid technological advancements, IT capabilities and cybersecurity have become paramount, particularly in the post-COVID-19 era. The service and manufacturing sectors in Saudi Arabia have seen significant shifts towards digital operations. This study aimed to explore the impact of organizational cybersecurity systems on organizational resilience and sustainable business performance in Saudi Arabia’s service and manufacturing sectors, examining the mediating and moderating effects of organizational resilience and culture. A quantitative research method was employed, combining a thorough literature review with empirical data from a sample of 394 respondents in Saudi Arabia, split evenly between the service and manufacturing sectors. Smart PLS 3.3.3 was used to test the proposed hypotheses. The findings suggested a positive effect of the factors of organizational cybersecurity systems on organizational resilience. Organizational cybersecurity systems also significantly influenced sustainable business performance; however, organizational resilience and culture did not play mediating and moderating roles. This study is one of the first to offer a nuanced analysis of IT capabilities and cybersecurity within Saudi Arabia’s service and manufacturing sectors, especially in a post-COVID-19 context. The insights gleaned contribute to the academic discourse and have pivotal managerial implications for organizations navigating the digital era in Saudi Arabia.

show abstract

Cybersecurity education, awareness raising, and training initiatives: National level evidence-based results, challenges, and promise

Cited by 17 publications

References 27 publications

Building a thematic framework of cybersecurity: a systematic literature review approach

Building a thematic framework of cybersecurity: a systematic literature review approach

Informational inequality: the role of resources and attributes in information security awareness

Organizational Cybersecurity Systems and Sustainable Business Performance of Small and Medium Enterprises (SMEs) in Saudi Arabia: The Mediating and Moderating Role of Cybersecurity Resilience and Organizational Culture

Contact Info

Product

Resources

About