Change search
CiteExportLink to record
Permanent link

Direct link
Cite
Citation style
  • apa
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Other style
More styles
Language
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Other locale
More languages
Output format
  • html
  • text
  • asciidoc
  • rtf
The Security Awareness Paradox: A Case Study
KTH, School of Computer Science and Communication (CSC), Media Technology and Interaction Design, MID.
KTH, School of Computer Science and Communication (CSC), Media Technology and Interaction Design, MID.ORCID iD: 0000-0002-2677-9759
KTH, School of Computer Science and Communication (CSC), Media Technology and Interaction Design, MID.
2014 (English)In: Advances in Social Networks Analysis and Mining (ASONAM), 2014 IEEE/ACM International Conference on, IEEE conference proceedings, 2014, 704-711 p.Conference paper, Published paper (Refereed)
Abstract [en]

Knowledge-intensive organizations are characterized by their dependency on highly skilled personnel who perform their daily work in a decentralized manner. In these organizations it is the users who make the important decisions, and therefore the organization’s information security awareness is upheld by and depends on its users’ combined security awareness. To assess the overall organizational security awareness it therefore becomes interesting to assess both the users’ individual level of securityawareness, as well as their level of consistency and conformity with regard to other users’ awareness. In the present case study, 15 semi-structured interviews have been undertaken within a large telecommunication companyin order to understand how significant IT security aspectsare understood within the organization. The study highlights a number of perception differences where the technical IT staff and the ordinary users do not share the same understanding. It is suggested that these perception differences result from a paradoxical situation where the users’ possibility to uphold security awareness is hindered because of security concerns.

Place, publisher, year, edition, pages
IEEE conference proceedings, 2014. 704-711 p.
Keyword [en]
User awareness, IT security, paradoxical reasoning
National Category
Computer Systems
Research subject
Human-computer Interaction; Information and Communication Technology
Identifiers
URN: urn:nbn:se:kth:diva-154083DOI: 10.1109/ASONAM.2014.6921663Scopus ID: 2-s2.0-84911164336OAI: oai:DiVA.org:kth-154083DiVA: diva2:755241
Conference
International Conference on Advances in Social Networks Analysis and Mining (ASONAM),China, 2014
Note

QC 20141106

Available from: 2014-10-14 Created: 2014-10-14 Last updated: 2016-12-01Bibliographically approved

Open Access in DiVA

fulltext(126 kB)