Designing an Email Security Awareness Program for State-Owned Enterprises in Namibia

Morolong, Mamoqenelo Priscilla; Shava, Fungai Bhunu; Shilongo, Victor Goodson

doi:10.1007/978-981-16-3945-6_67

Cited by 3 publications

(1 citation statement)

References 9 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Email-based phishing is one of the preferred attack methods used by cybercriminals to launch phishing attacks [84,85]. Malicious links are usually embedded in the emails and sent to the targets with messages enticing them to click the links.…”

Section: Phishing Attack Methods Tools Risks Measures Payload and Sto...mentioning

confidence: 99%

Investigation into Phishing Risk Behaviour among Healthcare Staff

et al. 2022

View full text Add to dashboard Cite

A phishing attack is one of the less complicated ways to circumvent sophisticated technical security measures. It is often used to exploit psychological (as as well as other) factors of human users to succeed in social engineering attacks including ransomware. Guided by the state-of-the-arts in a phishing simulation study in healthcare and after deeply assessing the ethical dilemmas, an SMSbased phishing simulation was conducted among healthcare workers in Ghana. The study adopted an in-the-wild study approach alongside quantitative and qualitative surveys. From the state-of-the art studies, the in-the-wild study approach was the most commonly used method as compared to laboratory-based experiments and statistical surveys because its findings are generally reliable and effective. The attack results also showed that 61% of the targeted healthcare staff were susceptible, and some of the healthcare staff were not victims of the attack because they prioritized patient care and were not susceptible to the simulated phishing attack. Through structural equation modelling, the workload was estimated to have a significant effect on self-efficacy risk (r = 0.5, p-value = 0.05) and work emergency predicted a perceived barrier in the reverse direction at a substantial level of r = −0.46, p-value = 0.00. Additionally, Pearson’s correlation showed that the perceived barrier was a predictor of self-reported security behaviour in phishing attacks among healthcare staff. As a result, various suggestions including an extra workload balancing layer of security controls in emergency departments and better security training were suggested to enhance staff’s conscious care behaviour.

show abstract

Section: Phishing Attack Methods Tools Risks Measures Payload and Sto...mentioning

confidence: 99%

Investigation into Phishing Risk Behaviour among Healthcare Staff

et al. 2022

View full text Add to dashboard Cite

show abstract

A framework for exploring incentive methods towards reducing phishing susceptibility in Healthcare: Based on a review and In-the-wild-field study approach

Yeng,

Yang,

Fauzi

et al. 2023

2023 Intelligent Methods, Systems, and Applications (IMSA)

View full text Add to dashboard Cite

Investigating into phishing risk behaviour among healthcare staff: The phish or the patient? (Preprint)

Yeng¹,

Yang²,

Fauzi³

et al. 2022

Preprint

View full text Add to dashboard Cite

BACKGROUND Through phishing attacks, the memory of the negative impact of security breaches in healthcare will remain with the inflicted for long. The healthcare sector is mostly associated with time sensitivity and the urgency to access patients’ records, especially during emergency situations. This creates a sense of force for management to opt for a ransom payment. Phishing is one of the less difficult ways to circumvent sophisticated technical security measures and it is used to exploit the psychological and other factors of the healthcare system users to succeed in the ransomware attack. OBJECTIVE Motivated by these, this study empirically examined the phishing susceptibility level among healthcare staff in Ghana. The study seeks to determine phishing appraisal threat levels among healthcare staff as well as their ability to resist phishing baits. Such knowledge would help hospital authorities to adopt better strategies to improve upon the security practice of the healthcare staff in a way towards mitigating real potential attacks METHODS Guided with the state-of-the-arts in phishing simulated study in healthcare and after deeply assessing the ethical dilemmas, an SMS-based phishing simulation was conducted among healthcare workers in Ghana. The study adopted an in-the-wild study approach alongside quantitative and qualitative surveys. RESULTS From the state-of-the-art studies, the in-the-wild study approach was commonly used as compared to laboratory-based experiments and statistical surveys because its findings are generally reliable and effective. The attack results showed that more than half of the targeted healthcare staff (61%) were susceptible to the attack. A survival bias phone call made to the participants showed that some of the healthcare staff were not victims. They prioritized patient care whereas other staff were victims because they were distracted by patient care. This raised a vital question as to what caused the susceptibility; is it the patient or the bait in the phishing? The intended phishing behavior risk of healthcare workers was generally lower than their actual behavior. A correlation between perception and work factor variables showed that perceived barrier was a predictor of self-reported intended phishing behaviour among healthcare staff, workload significantly predicted self-efficacy risk (r=0.494, p-value=0.05) and work emergency predicted perceived barrier risk in the reverse direction at a significant level of r=-0.401, p-value=0.05. CONCLUSIONS Based on the results, the study outlined various study implications including phishing security training, awareness and incentives with future directions for the scientific community to explore.

show abstract

Designing an Email Security Awareness Program for State-Owned Enterprises in Namibia

Cited by 3 publications

References 9 publications

Investigation into Phishing Risk Behaviour among Healthcare Staff

Investigation into Phishing Risk Behaviour among Healthcare Staff

A framework for exploring incentive methods towards reducing phishing susceptibility in Healthcare: Based on a review and In-the-wild-field study approach

Investigating into phishing risk behaviour among healthcare staff: The phish or the patient? (Preprint)

Contact Info

Product

Resources

About