ERIC Number: ED599138
Record Type: Non-Journal
Publication Date: 2019
Pages: 149
Abstractor: As Provided
ISBN: 978-1-3921-6632-1
ISSN: EISSN-
EISSN: N/A
Security Technology and Awareness Training; Do They Affect Behaviors and Thus Reduce Breaches?
Williams-Banta, Pauline Elaine
ProQuest LLC, Ph.D. Dissertation, Northcentral University
There is increasing competitive pressure on organizations as they battle frequent, costly, and complex cyber-attacks that seek to undermine the security, and availability of their computing systems. The problem is that people are said to be the weakest link in the security chain, so companies have made significant investments to safeguard their assets by investing in security technology and cybersecurity awareness for their employees. All in an effort to influence their cybersecurity attitudes and so reduce their risky security behaviors that may result in breaches. The purpose of this quantitative, correlational study was to understand the relationship between investments in cybersecurity knowledge, security awareness attitudes, and the effects of a cybersecurity breach within the organization guided by the tenets of protection motivation theory. The research was completed entirely online, and the 100 qualified participants were pre-screened to ensure they were aware of their company's cybersecurity policy and used technology for work functions. The Human Aspects of Information Security Questionnaire, which captures the knowledge, attitude, and behaviors associated with cybersecurity offered the foundation to capture the data for the study. The findings of this research answered the research questions and added to our knowledge in this area; participants were able to identify cybersecurity threats; there was a strong relationship between cybersecurity knowledge and cyber behavior. The Pearson correlation between cybersecurity technology knowledge and cybersecurity behavior was significant, (r = 0.84, p <0.001). Also, the relationship between cybersecurity attitude and cybersecurity behavior was highly significant (r = 0.95, p <0.001). Employees who displayed security awareness had less risky cyber behaviors, which would be a protection against breaches. Extant literature shows that technology alone will not stop hackers; a solution including human participation and technology was needed. The threat horizon continues to produce more frequent and complex cyber attacks, which can lead to data breaches, so organizations need to understand the relationships between cybersecurity knowledge, attitude, and behavior. Also, balancing these traits are valuable in helping managers decide on the types of security controls they need. These findings are consistent with existing research and theory. [The dissertation citations contained here are published with the permission of ProQuest LLC. Further reproduction is prohibited without permission. Copies of dissertations may be obtained by Telephone (800) 1-800-521-0600. Web page: http://bibliotheek.ehb.be:2222/en-US/products/dissertations/individuals.shtml.]
Descriptors: Computer Security, Training, Information Security, Knowledge Level, Behavior, Employee Attitudes, Employees
ProQuest LLC. 789 East Eisenhower Parkway, P.O. Box 1346, Ann Arbor, MI 48106. Tel: 800-521-0600; Web site: http://bibliotheek.ehb.be:2222/en-US/products/dissertations/individuals.shtml
Publication Type: Dissertations/Theses - Doctoral Dissertations
Education Level: N/A
Audience: N/A
Language: English
Sponsor: N/A
Authoring Institution: N/A
Grant or Contract Numbers: N/A