Security education and awareness: just let them burn?

O Fator Humano Da Cibersegurança Nas Organizações

“…Pode ser considerada, essencialmente, como uma medida preventiva que tem como objetivo estabelecer os princípios e procedimentos de cibersegurança na mente de todos os colaboradores, alertando-os para os problemas de segurança existentes e as suas possíveis consequências (Kajava & Siponen, 2002, Woerner, 2012. Em suma, pretende-se concentrar a atenção dos colaboradores na cibersegurança e aumentar a sua preocupação e sensibilização com estes temas (Furnell, 2017;Wilson & Hash, 2003).…”

Know Your Enemy: User Segmentation Based on Human Aspects of Information Security

“…P EOPLE are known to be the weakest link in information security [1], [2]. Lack of sufficient information security can lead to loss of finances and reputation [3].…”

“…Two key approaches for provision of training can be found in the literature, i.e., traditional and personalized training [2], [6]. The traditional (i.e., one-size-fits-all) approach follows the premise that all users should get the same training [2], [6], [7] although its content can be tailored to the needs of a specific organization. The traditional approach may not be suitable for all situations and often fails to deliver the intended benefits [2], [6], [8], [9].…”

“…The traditional (i.e., one-size-fits-all) approach follows the premise that all users should get the same training [2], [6], [7] although its content can be tailored to the needs of a specific organization. The traditional approach may not be suitable for all situations and often fails to deliver the intended benefits [2], [6], [8], [9]. For example, training should meet the needs of users (e.g., users' knowledge, attitude and behavior related to information security [10]), and given the constantly changing cyberenvironment, it should be up-to-date otherwise it becomes meaningless and/or expensive, and users may see training as an obstacle rather than as an advantage [2], [6], [11].…”

Cyber Security Skills of Pre-Service Teachers as a Factor in Computer-Assisted Education

“…The most common cyber threats include malicious software (malware) such as viruses, keyloggers and trojans, and techniques such as phishing and social engineering designed to harm individuals financially or mentally and to steal personal information (Chakraborty, 2019;Erbschloe, 2019;Kara & Aydos, 2019;Prem & Reddy, 2019). Against the above-mentioned risks, individuals should possess adequate knowledge and skills to maintain personal cyber security to safely meet all their needs and operate for various purposes without being harmed in the virtual environment (Furnell & Vasileiou, 2017;Kemper, 2019;Smith & Ali, 2019). In other words, the competence to maintain cyber security has become a sine qua non for anyone with a presence in the virtual environment for various purposes.…”