Lessons Learned from an Information Security Incident: A Practical Recommendation to Involve Employees in Information Security

Simple item page
dc.contributor.authorTatu, Teodora
dc.contributor.authorAment, Clara
dc.contributor.authorJaeger, Lennart
dc.date.accessioned2017-12-28T01:55:40Z
dc.date.available2017-12-28T01:55:40Z
dc.date.issued2018-01-03
dc.description.abstractWith the increasingly negative impact of information security attacks, measures of information security, which address the weakest link in the information security chain, namely the employee, have become a necessity for today’s business world. One way to improve employees’ - yet limited - information security awareness is to learn from past information security incidents. This study theoretically builds upon the so called involvement theory to extend the existing research on information security awareness. Insights gained from 34 interviews suggest that involvement accompanied with a detailed review of past security incidents has a positive effect on staff’s information security awareness. Employees, directly affected by an information security incident, gain significant information security expertise and knowledge which they can, again, share with their colleagues. Moreover, constructive team work in the light of information security risks as well as an adequate adjustment of security-related measures is fostered.
dc.format.extent10 pages
dc.identifier.doi10.24251/HICSS.2018.471
dc.identifier.isbn978-0-9981331-1-9
dc.identifier.urihttp://hdl.handle.net/10125/50359
dc.language.isoeng
dc.relation.ispartofProceedings of the 51st Hawaii International Conference on System Sciences
dc.rightsAttribution-NonCommercial-NoDerivatives 4.0 International
dc.rights.urihttps://creativecommons.org/licenses/by-nc-nd/4.0/
dc.subjectInnovative Behavioral IS Security and Privacy Research
dc.subjectbehavioral information security, information security awareness, information security incident, involvement theory.
dc.titleLessons Learned from an Information Security Incident: A Practical Recommendation to Involve Employees in Information Security
dc.typeConference Paper
dc.type.dcmiText

Files

Original bundle
Now showing 1 - 1 of 1
Thumbnail Image
Name:
paper0472.pdf
Size:
623.1 KB
Format:
Adobe Portable Document Format
Download

Collections

Innovative Behavioral IS Security and Privacy Research