We found a match
Your institution may have access to this item. Find your institution then sign in to continue.
- Title
HOUSE OF CARDS: DEVELOPING KPIS FOR MONITORING CYBERSECURITY AWARENESS (CSA).
- Authors
Alshammari, Mohammad Mulayh; Demetis, Dionysios S.
- Abstract
Non-malicious insider threats continue to pose a significant concern to an organisation's cybersecurity defence strategy, yet organisations still struggle to contain such insider threats. A critical pillar for doing so rests on the development and monitoring of Cybersecurity Awareness (CSA) programmes. CSA programmes need to be both prioritised and acknowledged as an important and crucial approach to the reduction of such threats. Although CSA programmes are developed on an ad-hoc basis by many organisations, the effectiveness of such programmes and how their entire lifecycle needs to be reviewed, monitored and managed needs to be further explored. In order to do so, this paper extracts a number of key performance indicators (KPIs) for monitoring CSA programmes. The paper relies on empirical data from an in-depth case study of University X in Saudi Arabia and sensitises the research approach by using Kirkpatrick's four level model as a theoretical scaffold. Through the combined use of Kirkpatrick's model that is recognised as a comprehensive model for evaluating the results of training and learning programmes and the empirical data from the case study, we offer a customised CSA-oriented model for managing cybersecurity awareness programmes, reflect on its associated KPIs, and consider broader information security management considerations.
- Subjects
KEY performance indicators (Management); INTERNET security; HOUSE of Cards (TV program : United States); SECURITY management; AWARENESS; INFORMATION technology security
- Publication
Journal of Information System Security, 2023, Vol 19, Issue 2, p133
- ISSN
1551-0123
- Publication type
Article