A prototype tool for information security awareness and training

S.M. Furnell; M. Gennatou; P.S. Dowland

doi:10.1108/09576050210447037

Login

Welcome:
Guest

Search for:

Browse:

Product Information:

Resources:

Logistics Information Management

ISSN: 0957-6053
Currently published as: Journal of Enterprise Information Management

Online from: 1988

Subject Area: Information and Knowledge Management

Content: Latest Issue | Latest Issue RSS | Previous Issues

Options: To add Favourites and Table of Contents Alerts please take a Emerald profile

A prototype tool for information security awareness and training

Document Information:
Title:	A prototype tool for information security awareness and training
Author(s):	S.M. Furnell, (Head of the Network Research Group, Department of Communication and Electronic Engineering, University of Plymouth, Plymouth, UK), M. Gennatou, (Project Student, Network Research Group, Department of Communication and Electronic Engineering, University of Plymouth, Plymouth, UK), P.S. Dowland, (Lecturer, Network Research Group, Department of Communication and Electronic Engineering, University of Plymouth, Plymouth, UK)
Citation:	S.M. Furnell, M. Gennatou, P.S. Dowland, (2002) "A prototype tool for information security awareness and training", Logistics Information Management, Vol. 15 Iss: 5/6, pp.352 - 357
Keywords:	Computer security, Corporate culture, Information systems, Security, Training
Article type:	Technical paper
DOI:	10.1108/09576050210447037 (Permanent URL)
Publisher:	MCB UP Ltd
Abstract:	Information systems security is a critical issue for all organisations with a significant dependence upon information technology. However, it is a requirement that is often difficult to address, particularly within small organisations, as a result of a lack of resources and expertise. This paper identifies the need for security awareness and describes the prototype implementation of a software tool that enables individuals to pursue self-paced security training. The tool provides an environment that permits the user to simulate the introduction of security into a number of pre-defined case study scenarios. This enables staff to become familiar with the types of countermeasures available, the situations in which they are appropriate and any constraints that they may impose. This would be particularly valuable in small organisations where specialist knowledge is often scarce and issues need to be addressed by existing staff.