The Level of Information Security Awareness among Academic Staff in IHL

Authors

  • Mohd Fairuz Iskandar Othman Human Centered Computing - Information Systems Lab (HCC-ISL), Centre for Advanced Computing Technology (C-ACT) Faculty of Information and Communication Technology (FTMK), Universiti Teknikal Malaysia Melaka Hang Tuah Jaya, Durian Tunggal 76100, Melaka, Malaysia
  • Fayez Alqahtani Computer Science Department, King Saud University, Riyadh, Saudi Arabia
  • Md Ahsanul Bari Human Centered Computing - Information Systems Lab (HCC-ISL), Centre for Advanced Computing Technology (C-ACT) Faculty of Information and Communication Technology (FTMK), Universiti Teknikal Malaysia Melaka Hang Tuah Jaya, Durian Tunggal 76100, Melaka, Malaysia
  • Ahmad Naim Che Pee Human Centered Computing - Information Systems Lab (HCC-ISL), Centre for Advanced Computing Technology (C-ACT) Faculty of Information and Communication Technology (FTMK), Universiti Teknikal Malaysia Melaka Hang Tuah Jaya, Durian Tunggal 76100, Melaka, Malaysia
  • Yahaya Abdul Rahim Human Centered Computing - Information Systems Lab (HCC-ISL), Centre for Advanced Computing Technology (C-ACT) Faculty of Information and Communication Technology (FTMK), Universiti Teknikal Malaysia Melaka Hang Tuah Jaya, Durian Tunggal 76100, Melaka, Malaysia
  • Hamzah Asyrani Sulaiman Human Centered Computing - Information Systems Lab (HCC-ISL), Centre for Advanced Computing Technology (C-ACT) Faculty of Information and Communication Technology (FTMK), Universiti Teknikal Malaysia Melaka Hang Tuah Jaya, Durian Tunggal 76100, Melaka, Malaysia

Keywords:

Information Security Awareness (ISA), ISMS, Risk, Institutions of Higher Learning (IHL),

Abstract

IS security awareness plays a significant role in the process of the overall information security of any organisation. Based on an empirical study of 368 academic staff in three institutions of higher learning (IHL), we found that the level of information security awareness can be considered good, but it can certainly be improved further. Employees need further training in this area mainly at institutions which only recently received the ISO/IEC 27001:2013 certification. Our sample seems to suggest that demographics such as the age of the respondents contributed to their information security risk tolerance and adherence behaviour.

References

H. Cavusoglu, B. Mishra, and S. Raghunathan, "A model for evaluating IT security investments," Communications of the ACM, vol. 47, pp. 87- 92, 2004.

J. D'Arcy, A. Hovav, and D. Galletta, "User awareness of security countermeasures and its impact on information systems misuse: a deterrence approach," Information Systems Research, vol. 20, pp. 79- 98, 2009.

J. L. Spears and H. Barki, "User participation in information systems security risk management," MIS quarterly, pp. 503-522, 2010.

M. E. Thomson and R. von Solms, "Information security awareness: educating your users effectively," Information management & computer security, vol. 6, pp. 167-173, 1998.

M. T. Siponen, "A conceptual foundation for organizational information security awareness," Information Management & Computer Security, vol. 8, pp. 31-41, 2000.

P. Puhakainen and R. Ahonen, "Design theory for information security awareness," 2006.

B. Bulgurcu, H. Cavusoglu, and I. Benbasat, "Information security policy compliance: an empirical study of rationality-based beliefs and information security awareness," MIS quarterly, vol. 34, pp. 523-548, 2010.

K. J. Knapp and C. J. Ferrante, "Policy awareness, enforcement and maintenance: Critical to information security effectiveness in organizations," Journal of Management Policy and Practice, vol. 13, p. 66, 2012.

A. Marks, "Exploring universities’ information systems security awareness in a changing higher education environment: A Comparative Case Study Research," PhD, University of Salford, 2007.

T. Bond, C. Stephens, and D. Piscitello, "Security Awareness Survey," 2012.

T. Herath and H. R. Rao, "Encouraging information security behaviors in organizations: Role of penalties, pressures and perceived effectiveness," Decision Support Systems, vol. 47, pp. 154-165, 2009/05/01/ 2009.

Downloads

Published

2018-07-04

How to Cite

Othman, M. F. I., Alqahtani, F., Bari, M. A., Che Pee, A. N., Abdul Rahim, Y., & Sulaiman, H. A. (2018). The Level of Information Security Awareness among Academic Staff in IHL. Journal of Telecommunication, Electronic and Computer Engineering (JTEC), 10(2-5), 65–68. Retrieved from https://jtec.utem.edu.my/jtec/article/view/4353

Issue

Vol. 10 No. 2-5: Embracing The 4th Industrial Revolution: Innovation in Telecommunication, Electronic & Computer Engineering I

Section

Articles

License

TRANSFER OF COPYRIGHT AGREEMENT

The manuscript is herewith submitted for publication in the Journal of Telecommunication, Electronic and Computer Engineering (JTEC). It has not been published before, and it is not under consideration for publication in any other journals. It contains no material that is scandalous, obscene, libelous or otherwise contrary to law. When the manuscript is accepted for publication, I, as the author, hereby agree to transfer to JTEC, all rights including those pertaining to electronic forms and transmissions, under existing copyright laws, except for the following, which the author(s) specifically retain(s):

  1. All proprietary right other than copyright, such as patent rights
  2. The right to make further copies of all or part of the published article for my use in classroom teaching
  3. The right to reuse all or part of this manuscript in a compilation of my own works or in a textbook of which I am the author; and
  4. The right to make copies of the published work for internal distribution within the institution that employs me

I agree that copies made under these circumstances will continue to carry the copyright notice that appears in the original published work. I agree to inform my co-authors, if any, of the above terms. I certify that I have obtained written permission for the use of text, tables, and/or illustrations from any copyrighted source(s), and I agree to supply such written permission(s) to JTEC upon request.


Most read articles by the same author(s)