Information and Computer Security: Volume 24 Issue 2

Guest editorial

Steven Furnell, Nathan Clarke

Comparing the information security culture of employees who had read the information security policy and those who had not: Illustrated through an empirical study

Adéle Da Veiga

This study aims, firstly, to determine what influence the information security policy has on the information security culture by comparing the culture of employees who read the…

Factors to affect improvement in cyber officer performance

Kirsi Helkala, Benjamin Knox, Øyvind Jøsok, Silje Knox, Mass Lund

The purpose of this study is to investigate how motivation – gained by understanding the purpose of specific cyber-oriented tasks – coping strategies and level of physical…

Attention and past behavior, not security knowledge, modulate users’ decisions to login to insecure websites

Timothy Kelley, Bennett I. Bertenthal

Modern browsers are designed to inform users as to whether it is secure to login to a website, but most users are not aware of this information and even those who are sometimes…

Decoding audience interpretations of awareness campaign messages

Rayne Reid, Johan Van Niekerk

This research aims to determine whether the educational influence of the cybersecurity awareness campaign on the audience (their knowledge, behaviour and potential cybersecurity…

An empirical test of the perceived relationship between risk and the constituents severity and probability

Teodor Sommestad, Henrik Karlzén, Peter Nilsson, Jonas Hallberg

In methods and manuals, the product of an information security incident’s probability and severity is seen as a risk to manage. The purpose of the test described in this paper is…

An information security risk-driven investment model for analysing human factors

Reza Alavi, Shareeful Islam, Haralambos Mouratidis

The purpose of this paper is to introduce a risk-driven investment process model for analysing human factors that allows information security managers to capture possible…

Assessing information security attitudes: a comparison of two studies

Malcolm Pattinson, Kathryn Parsons, Marcus Butavicius, Agata McCormac, Dragana Calic

The purpose of this paper is to report on the use of two studies that assessed the attitudes of typical computer users. The aim of the research was to compare a self-reporting…