Modelling the effects of personal factors on information security awareness

Abstract

According to research, the number of attacks on the Internet has been increasing each year. Hence, information security awareness is a very significant skill. Accordingly, this study aimed to investigate the effects of students’ personal factors on their information security awareness. The researchers conducted a quantitative study that examines a theoretical model. The data were collected from 684 undergraduate students via three data tools. The effects of variables on information security awareness were explained via path analysis. The mediating role of technology attitude was examined in the relationship between information security awareness and the individual variables for the first time. The findings showed that gender and grade did not directly affect information security awareness levels, while attending information security training, department and technology attitude had a significant effect. On the other hand, some personal factors indirectly affected information security awareness. This analysis offered substantial contributions to the literature in uncovering the effects of variables on students’ information security awareness in a holistic way. The results can guide planning for information security training to increase information security awareness by considering personal factors.

What are developers talking about information security? A large-scale study using semantic analysis of Q&A posts

“…Numerous literature reviews have been conducted so far to understand the information security paradigm ( Dlamini, Eloff & Eloff, 2009 ; Silic & Back, 2014 ; Soomro, Shah & Ahmed, 2016 ; Glaspie & Karwowski, 2018 ). Domain-specific studies have generally addressed information security architectures, techniques, and tools ( Whitman & Mattord, 2021 ), risk analysis and management ( Soomro, Shah & Ahmed, 2016 ), threats to information security and solutions ( Lopez et al, 2018 ), applications in different fields ( Silic & Back, 2014 ), information security awareness ( McCormac et al, 2017 ; Albayrak & Bağcı, 2022 ), the development of secure protocols ( Dlamini, Eloff & Eloff, 2009 ), and the evolution and future of information security ( de Leeuw & Bergstra, 2007 ; Stewart, 2013 ). These reviews offered insights into the themes and trends of information security in both academia and industry ( Furnell, Fischer & Finch, 2017 ; Glaspie & Karwowski, 2018 ).…”