CORRELATING INFORMATION SECURITY AWARENESS WITH HUMAN PSYCHOLOGY

An effective user protection awareness campaign will significantly improve an organization's information assurance posture. In addition to technology, information management covers operational dimensions, legal aspects, institutionalisation, and implementation of common practises. In the protection domain, user understanding is a major obstacle, with the human factor essentially becoming the feature manipulated in a number of attack scenarios. Any organization's policy would provide an information protection training programme. Unlike other information security awareness research, which focuses on explaining methods and strategies for increasing awareness, this paper examines and tests the efficacy of various information security awareness approaches and techniques using psychological hypotheses and models. Finally, it explains how to assess an organization's information security knowledge.