Anzeige
Erschienen in:
2014 | OriginalPaper | Buchkapitel
DSAPE – Dynamic Security Awareness Program Evaluation
verfasst von : Charalampos Manifavas, Konstantinos Fysarakis, Konstantinos Rantos, George Hatzivasilis
Erschienen in: Human Aspects of Information Security, Privacy, and Trust
Verlag: Springer International Publishing
Aktivieren Sie unsere intelligente Suche, um passende Fachinhalte oder Patente zu finden.
Wählen Sie Textabschnitte aus um mit Künstlicher Intelligenz passenden Patente zu finden. powered by
Markieren Sie Textabschnitte, um KI-gestützt weitere passende Inhalte zu finden. powered by
This paper addresses the importance of continuously evaluating an organization’s awareness program and provides guidelines that will help organizations assess their efforts, extending the authors’ work in [1]. The proposed methodology evaluates an awareness program considering the most common and essential methods used for delivering awareness material. Key awareness-related processes and accompanying quantitative metrics are identified, along with a methodology for dynamically evaluating the metrics and the overall awareness program as a whole. A software tool is developed, to facilitate the deployment and maintenance of the assessment methods and to formalize their aggregation and evaluation. An organization’s security awareness posture is modelled as a dynamic system and the awareness level is calculated and monitored through time via Event Calculus. Furthermore, the tool can be deployed in a multi-agent form, to enable its use by organizations operating through remote offices and distributed locations.