Notes

NOTLAR
-----------
++The ideal information security programme is to make all employees of an organisation to share responsibilities for the security of information and information systems accessible to them.
++In order to combat user-based vulnerabilities and improve the security awareness levels of users, a robust awareness programme is required to ensure that people understand their information security responsibilities, organisational policies, and how to properly use and protect the organisational assets.
++For example, Valentine (2006Valentine, J. A. 2006. Enhancing the employee security awareness model. Computer Fraud & Security, 6, 17–19. doi: 10.1016/S1361-3723(06)70370-0
[Crossref] , [Google Scholar]
) explained how he was able to walk into a retail chain store and obtained the keys to the store's server room without even being asked to provide any type of identification.
++ The main goal of a security awareness programme is to raise employee information security awareness in an organisation. As with any programme, the success of information security awareness programme will rely heavily on how the awareness information is delivered. There are many information security awareness delivery models. These models are capable of raising the awareness of employees about a wide array of cyber security problems that ranges from spam and phishing to well organised attacks intended to corrupt or disable systems. In this section, we will review the various information security awareness delivery methods commonly used to provide a context for subsequent discussion of our work.



KAYNAKLAR
https://www.tandfonline.com/doi/full/10.1080/0144929X.2012.708787