Analysis of personal information security behavior and awareness. Issue 56 (February 2016)

• Record Type: Journal Article
• Authors: Öğütçü, Gizem; Testik, Özlem Müge; Chouseinoglou, Oumout
• Is Part Of: Computers & security. Issue 56(2016)
• Page Start: 83
• Page End: 93
• Publication Date: 2016-02
• Subjects: Information security behavior -- Personal information security -- Information security awareness -- Scale development -- Social engineering; Computer security -- Periodicals; Electronic data processing departments -- Security measures -- Periodicals; 005.805
• DOI: 10.1016/j.cose.2015.10.002
• Languages: English
• ISSNs: 0167-4048

Abstract

Highlights: We analyze the personal information security behavior and awareness of 881 IS users. We propose four scales to measure how risky individuals' behavior is when using IS. The more the respondents perceive threats, their behavior becomes more protective. Students, compared to other groups, are more vulnerable against risks. The education level and information security awareness are positively correlated. Abstract: Hardware and software security mechanisms are widely used to strengthen information systems (IS) against attacks. However, these systems are still highly vulnerable to threats from users' undesirable behaviors, which are closely related to IS users' information security awareness. This study has been carried out in an effort to investigate the IS users' risky behaviors that may threaten information security. The preventive actions employed by users, the threats they may be exposed to, or whether they had an adverse experience or to what extent they perceive risks have also been investigated. Four scales: Risky Behavior Scale (RBS), Conservative Behavior Scale (CBS), Exposure to Offence Scale (EOS) and Risk Perception Scale (RPS), were developed depending on the data collected with the use of surveys. The scales developed from the content of the survey were applied to students, academics and administrative staff of a university, which also embodies hospitals and educational organizations located in different geographical and socio-economical regions of Turkey. On the base of developed scales, the results of the study show that there are significant differences within samples and according to the habits of Internet usage.