Measurement of Employee Information Security Awareness Using the Human Aspects of Information Security Questionnaire (HAIS-Q): Case Study at PT. PQS
Aulia Zulfia, Rodiatul Adawiyah, Achmad Nizar Hidayanto, Nur Fitriah Ayuning Budi · 2019
Human error is one of information security breaches that plays a significant role, with employee identified as the largest source of compromise. The purpose of this study is to measure information awareness at PT. PQS by using Human Aspects of Information Security Questionnaire (HAIS- Q). HAIS-Q is an instrument used to assess the extent to which a company's organizational system is vulnerable to threats caused by employee behavior. HAIS-Q is distributed to 51 employees with 45 valid questionnaires. Valid questionnaire results were then carried out with a level of internal consistency using Cronbach's Alpha. Based on the measurement results in each sub-area using descriptive statistics, the lowest respondent's score are downloading files, accessing dubious files, and clicking links on emails from known senders. The recommendations we provide for increasing that sub-areas are by improving information-related policies and procedures, conducting security awareness programs, and improving technology aspects.