HOW LONG DO EMPLOYEES REMEMBER INFORMATION SECURITY TRAINING PROGRAMS? A STUDY OF KNOWLEDGE ACQUISITION AND RETENTION
Issues in Information Systems · 2016
Organizations mitigate information security risk by providing relevant and timely training for end users.While training budgets have increased in recent years, few organizations have taken the next step to measure how effective these programs are in changing behavior.An antecedent to behavioral change is increasing knowledge.This study explores the effectiveness of an information security training program by measuring the differences in pre and posttest results to determine levels of knowledge acquisition and knowledge retention.The results of this study showed a statistically significant difference in the increase in pre to post-test scores within the participant groups.The instructor-led group's level of knowledge acquisition was higher than the computer-based training group.The results of this study may be meaningful for an organization that is in the beginning stages of implementing a corporate information security training program.