A Skills Based Approach to Tackle Failure of Cybersecurity Awareness Programs in Organizations
Dinesh Reddy, Glenn B. Dietrich · Journal of the Association for Information Systems · 2020
Cybersecurity awareness programs in organizations increase employee compliance to security policies to most extent. However, employees still fail to comply with security policies in spite of having cybersecurity awareness programs in place, making it difficult to understand the effectiveness of such programs. The purpose of this paper is to explain a skills based approach that helps examine the effect of cybersecurity (countermeasures) awareness dimensions on specific skill development which eventually results in higher compliance to security policies. This research is significantly important because we get to know if some dimensions of cybersecurity awareness are not contributing directly or indirectly to any form of cyber skill development which further challenges the organizations to successfully implement cybersecurity awareness programs that lead to higher compliance. This research has both practical and theoretical contributions that help organizations to design better cybersecurity awareness programs.