Impact of the Human Element on Information Security

View Sample PDF

Author(s): Mahi Dontamsetti (President, M3 Security, USA)and Anup Narayanan (Founder Director, First Legion Consulting, India)
Copyright: 2009
Pages: 16
Source title: Social and Human Elements of Information Security: Emerging Trends and Countermeasures
Source Author(s)/Editor(s): Manish Gupta (State University of New York, USA)and Raj Sharman (State University of New York, USA)
DOI: 10.4018/978-1-60566-036-3.ch003

Keywords: Information Science Reference / Information Security & Privacy / IT Security and Ethics / Security & Forensics

Purchase

View Impact of the Human Element on Information Security on the publisher's website for pricing and purchasing information.

Abstract

This chapter discusses the impact of the human element in information security. We are in the third generation of information security evolution, having evolved from a focus on technical, to process based, to the current focus on the human element. Using case studies, the authors detail how existing technical and process based controls are circumvented, by focusing on weaknesses in human behavior. Factors that affect why individuals behave in a certain way, while making security decisions are discussed. A psychology framework called the conscious competence model is introduced. Using this model, typical individual security behavior is broken down into four quadrants using the individuals’ consciousness and competence. The authors explain how the model can be used by individuals to recognize their security competency level and detail steps for learning more effective behavior. Shortfalls of existing training methods are highlighted and new strategies for increasing information security competence are presented.

The IRMA Community

Research IRM

Impact of the Human Element on Information Security

Purchase

Abstract

Related Content

IRMA Sponsors