Delivering Effective Cybersecurity Awareness Training to Support the Organizational Information Security Function

Abstract

Traditional security education, training, and awareness (SETA); cybersecurity awareness programs; and information security awareness programs are falling behind to deal with the current cyberthreat landscape in any organizational environment. Human behaviors are the weakest links in cybersecurity, especially in situations where cyberthreats are not isolated, blocked, or reported to the information security specialists for further action. Moreover, the study compares recent awareness frameworks, approaches, and methodologies. An extended research that includes an awareness training model to deal with existing challenges when delivering cybersecurity to different levels of positions in any organization. The cybersecurity awareness training model (CATRAM) has been designed to deliver training to different organizational audiences, each of these groups with specific content and separate objectives. The study concluded by addressing the need for future and innovative research to target new approaches to keep cybersecurity awareness focused on the everchanging cyberthreat landscape.