Enterprise cybersecurity training and awareness programs: Recommendations for success. Issue 4 (2nd October 2019)

• Record Type: Journal Article
• Authors: He, Wu; Zhang, Zuopeng (Justin)
• Is Part Of: Journal of organizational computing and electronic commerce. Volume 29:Issue 4(2019)
• Page Start: 249
• Page End: 257
• Publication Date: 2019-10-02
• Subjects: Awareness -- cybersecurity -- training -- success; Management -- Data processing -- Periodicals; Electronic commerce -- Periodicals; Electronic data interchange -- Periodicals; Business enterprises -- Computer networks -- Periodicals; 658.0505
• DOI: 10.1080/10919392.2019.1611528
• Languages: English
• ISSNs: 1091-9392

Abstract

ABSTRACT: To help employees recognize and change their computing security behavior, organizations need to invest in cybersecurity training and awareness programs to encourage their employees' active engagement in complying with their security policies. However, many organizations' cybersecurity training and awareness programs fail to achieve their goals as employees feel bored with such training programs and lack enthusiasm to participate in them. Highlighting the criticality of the success of cybersecurity training and awareness programs in organizations, this paper identifies best practices and provides actionable insights (relating cyber awareness to employees' personal life, reinforcing security procedures and guidelines, instilling a "relaxed alert" state of employees, and minimizing security fatigue for employees) that will help enterprises develop and implement economical, effective, and engaging cybersecurity training and awareness programs.