Overall, management and employees had reasonable levels of InfoSec awareness. However, weaknesses were identified in the use of wireless technology, the reporting of security incidents and the use of social networking sites. These weaknesses were identified in the survey data of the employees and corroborated in the management interviews.
Construct | Cites | Category | Questions given? | Content validity | Pretests | Response type | Notes |
---|---|---|---|---|---|---|---|
importance of InfoSec policies | NEW | no | no | none | various | ||
principles of InfoSec policies | NEW | no | no | none | various | ||
rules of InfoSec policies | NEW | no | no | none | various | ||
password management | NEW | no | no | none | various | ||
email and Internet usage | NEW | no | no | none | various | ||
reporting security incidents | NEW | no | no | none | various | ||
consequences of behaviour | NEW | no | no | none | various | ||
training | NEW | no | no | none | various |
Kathryn Parsons, Agata McCormac, Malcolm Pattinson, Marcus Butavicius, and Cate Jerram. A study of information security awareness in Australian government organisations. Information Management & Computer Security, 22(4):334–345, 2014.
@article{parsons_study_2014,
author = {Parsons, Kathryn and McCormac, Agata and Pattinson, Malcolm and Butavicius, Marcus and Jerram, Cate},
journal = {Information Management \& Computer Security},
number = {4},
pages = {334--345},
title = {A Study of Information Security Awareness in {{Australian}} Government Organisations},
volume = {22},
year = {2014}
}