Abstract

Information exchange is a key aspect of using technology in everyday life. Crimes associated with the lack of information security awareness (ISA), misuse and carelessness are on the increase and often result in heavy losses and serious consequences. In order for ISA campaigns and programmes to be effective, the most successful and influential factors must be employed in the human component of the security awareness process. The purpose of this study is to investigate the causes of human breaches to information security and undertake a weight analysis of the models’ predictors’ relationships utilised in ISA literature from the current decade. Usable data were collected from twenty-one empirical studies related to ISA research in order to obtain the correlations required to perform a weight analysis process for a predictor's relationships. The relationships examined in all studies used in this research (significant–nonsignificant) are presented in a diagram. Findings show that six independent variables were found to be classified as ‘wellutilised’ variables, and the rest of the independent variables converge at the ‘Promising’ classification level. Contributions, limitations and directions of future work are presented.

Highlights

  • The rise in cybercrime around the world is an alarming problem

  • Published By: in order to create cyber security awareness in the Sultanate of Oman, it is necessary to know the psychological factors influencing the creation of sufficient and effective user awareness. These factors must take into account the changing needs of people; they must consider people’s patterns and daily cultural practices. Considering these factors, this paper has reviewed various studies that show reasons for the most common information security breaches among end users; the paper has reviewed models and frameworks utilised in information security awareness (ISA) literature showing the psychological factors affecting the creation of ISA among users, followed by a diagram of the relationships between variables and their weight analysis table

  • Despite the diligent efforts of various organisations to promote awareness of information security to their staff, the reviewed surveys and explorative studies (Table I) indicate that there is a lack of security awareness even among end users

Read more

Summary

Introduction

The rise in cybercrime around the world is an alarming problem. Statistics on the 2019 Internet World Stats point to an increase in the number of Internet users in the Middle East [1], where the percentage of users in Oman is (2.3%) of the total number of Internet users in the Middle East, which exceeds (3.9%) of the global number of Internet users. Published By: in order to create cyber security awareness in the Sultanate of Oman, it is necessary to know the psychological factors influencing the creation of sufficient and effective user awareness These factors must take into account the changing needs of people; they must consider people’s patterns and daily cultural practices. Different cyber-attacks, especially social engineering attacks are flexible and can be changed in different ways Security experts describe these kinds of attacks as a transmittable disease which has ability to adapt into new styles each time it is detected [8]. From this perspective, it is clear that how this kind of attack poses a major threat and is difficult to defend against, even to those users with fundamental ISA. It is important to determine and identify psychological factors of the human component that influence raising the ISA in Oman after investigating causes of employee-generated security breaches

Objectives
Methods
Results
Conclusion

Talk to us

Join us for a 30 min session where you can share your feedback and ask us any queries you have

Schedule a call

Disclaimer: All third-party content on this website/platform is and will remain the property of their respective owners and is provided on "as is" basis without any warranties, express or implied. Use of third-party content does not indicate any affiliation, sponsorship with or endorsement by them. Any references to third-party content is to identify the corresponding services and shall be considered fair use under The CopyrightLaw.