文章基本信息

标题：A FRAMEWORK FOR INFORMATION SECURITY AWARENESS PROGRAMS
本地全文：下载
作者：Carlos Domínguez ; Mysore Ramaswamy ; Eulalia Martinez 等
期刊名称：Issues in Information Systems
印刷版ISSN：1529-7314
出版年度：2010
卷号：11
期号：1
页码：402-409
出版社：International Association for Computer Information Systems
摘要：The importance of information security cannot be overemphasized in today’s networked corporate world. A major component of reducing the risk of security breach in information assets is by implementing an effective security awareness program in organizations. Empirical data for this research is based on a study of two highly regulated industries – Banking and Insurance - in Puerto Rico Metropolitan Area. In this paper, we look into the various factors that go into the designing an effective security awareness program and how such a program can help companies reduce the risk of security breach. Management support is very important for the success of the program. We analyze methods for building a successful security awareness program and present a set of recommendations for strengthening the program.
关键词：Information Security; Risk Reduction;Security Awareness; Security Controls; Social;Engineering.