國立虎尾科技大學 |

Enhanced Organizational Security Awareness : = A Qualitative Study.

Record Type:	Language materials, manuscript : Monograph/item
Title/Author:	Enhanced Organizational Security Awareness :/
Reminder of title:	A Qualitative Study.
Author:	Grassett, Stephen.
Description:	1 online resource (199 pages)
Notes:	Source: Dissertations Abstracts International, Volume: 83-12, Section: B.
Contained By:	Dissertations Abstracts International83-12B.
Subject:	Information technology. -
Online resource:	click for full text (PQDT)
ISBN:	9798819383261

Enhanced Organizational Security Awareness : = A Qualitative Study.
Grassett, Stephen.

Enhanced Organizational Security Awareness :A Qualitative Study. - 1 online resource (199 pages)

Source: Dissertations Abstracts International, Volume: 83-12, Section: B.

Thesis (D.Sc.)--Capitol Technology University, 2022.

Includes bibliographical references

This qualitative Delphi study explored security awareness to discover enhanced employee training techniques based on expert opinions of Chief Information Security Officers (CISOs) of any organization. The purpose of this study is to improve security awareness programs by gathering industry best practices based on expert opinions. The general problem is that organizations lack mature, effective security awareness programs to fight persistent cyber-attacks that risk data breaches (Mills, 2018; Pharris, 2019; Sousane, 2018). The specific problem is that current security awareness techniques fail to recognize persistent threats (Aldawood, 2019; Alruwaili, 2019; Brisson & Savoie, 2018; Eling & Schnell, 2016). This qualitative Delphi study used a maturity model as the conceptual framework. The primary research question was: What are the security awareness techniques CISOs need to implement for enhanced, mature security awareness? The criteria to participate in this research was to hold the title of CISO or equivalent and have implemented a security awareness program for an organization. SurveyMonkey was used to capture participant opinions solicited via LinkedIn. The results of the first round of survey prompts used thematic analysis to inform the next two rounds of survey prompts. The study identified two techniques to implement for enhanced, mature security awareness programs: (1) executive and senior management buy-in regarding security awareness and (2) enforcement of policies with employees who are not compliant with mandatory training.

Electronic reproduction.
Ann Arbor, Mich. :
ProQuest,
2024

Mode of access: World Wide Web

ISBN: 9798819383261Subjects--Topical Terms:

559429
Information technology.
Subjects--Index Terms:

Chief information security Officer (CISO)Index Terms--Genre/Form:

554714
Electronic books.

Enhanced Organizational Security Awareness : = A Qualitative Study.
LDR:02909ntm a22003737 4500 001 1142435
005 20240422070831.5
006 m o d
007 cr mn ---uuuuu
008 250605s2022 xx obm 000 0 eng d
020 $a 9798819383261
035 $a (MiAaPQ)AAI29212930
035 $a AAI29212930
040 $a MiAaPQ $b eng $c MiAaPQ $d NTU
100 1 $a Grassett, Stephen. $3 1466753
245 1 0 $a Enhanced Organizational Security Awareness : $b A Qualitative Study.
264 0 $c 2022
300 $a 1 online resource (199 pages)
336 $a text $b txt $2 rdacontent
337 $a computer $b c $2 rdamedia
338 $a online resource $b cr $2 rdacarrier
500 $a Source: Dissertations Abstracts International, Volume: 83-12, Section: B.
500 $a Advisor: Butler, William H.
502 $a Thesis (D.Sc.)--Capitol Technology University, 2022.
504 $a Includes bibliographical references
520 $a This qualitative Delphi study explored security awareness to discover enhanced employee training techniques based on expert opinions of Chief Information Security Officers (CISOs) of any organization. The purpose of this study is to improve security awareness programs by gathering industry best practices based on expert opinions. The general problem is that organizations lack mature, effective security awareness programs to fight persistent cyber-attacks that risk data breaches (Mills, 2018; Pharris, 2019; Sousane, 2018). The specific problem is that current security awareness techniques fail to recognize persistent threats (Aldawood, 2019; Alruwaili, 2019; Brisson & Savoie, 2018; Eling & Schnell, 2016). This qualitative Delphi study used a maturity model as the conceptual framework. The primary research question was: What are the security awareness techniques CISOs need to implement for enhanced, mature security awareness? The criteria to participate in this research was to hold the title of CISO or equivalent and have implemented a security awareness program for an organization. SurveyMonkey was used to capture participant opinions solicited via LinkedIn. The results of the first round of survey prompts used thematic analysis to inform the next two rounds of survey prompts. The study identified two techniques to implement for enhanced, mature security awareness programs: (1) executive and senior management buy-in regarding security awareness and (2) enforcement of policies with employees who are not compliant with mandatory training.
533 $a Electronic reproduction. $b Ann Arbor, Mich. : $c ProQuest, $d 2024
538 $a Mode of access: World Wide Web
650 4 $a Information technology. $3 559429
653 $a Chief information security Officer (CISO)
653 $a Delphi
653 $a Maturity model
653 $a Security awareness
653 $a Thematic analysis
655 7 $a Electronic books. $2 local $3 554714
690 $a 0489
710 2 $a ProQuest Information and Learning Co. $3 1178819
710 2 $a Capitol Technology University. $b Science (D.Sc.). $3 1466754
773 0 $t Dissertations Abstracts International $g 83-12B.
856 4 0 $u http://pqdd.sinica.edu.tw/twdaoapp/servlet/advanced?query=29212930 $z click for full text (PQDT)