20.500.12556/RUL-152910 Balancing software and training requirements for information security Information security is one of the key areas of consideration to assure reliable and dependable information systems (IS). Achieving an appropriate level of IS security requires concurrent consideration of the technical aspects of IS and the human aspects related to the end users of IS. These aspects can be described in the form of information security requirements. We propose an approach that helps select and balance information security software requirements (iSSR) and information security training requirements (iSTR) according to the information security performance of end users. The approach was tested in an experiment involving 128 IS professionals. The results showed that using the proposed approach helps IS professionals with limited experience in information security make significantly better decisions regarding iSSR and iSTR. cyber security experiment information security standard requirements engineering end user training information security kibernetska varnost eksperiment informacijskovarnostni standardi inženirstvo zahtev usposabljanje končnih uporabnikov informacijska varnost true false true Angleški jezik Slovenski jezik Članek v reviji 2023-12-11 13:54:17 2023-12-11 13:54:18 2024-10-01 14:49:04 0000-00-00 00:00:00 2023 0 0 13 str. art. 103467 Vol. 134 Nov. 2023 0000-00-00 Zaloznikova Objavljeno NiDoloceno 0000-00-00 0000-00-00 0000-00-00 659.2:004 0167-4048 10.1016/j.cose.2023.103467 163668739 1-s2.0-S0167404823003772-main.pdf 1-s2.0-S0167404823003772-main.pdf 1 842DE045EC445CB55D91E3A935D6A939 bbc2f6162e3f385bb736ef12a2f6c220298e6f20531f27aaa2cf1a467e2c2da4 f039fe3c-9825-11ee-bb90-0050569b8976 https://repozitorij.uni-lj.si/Dokument.php?lang=slv&id=178638 https://www.sciencedirect.com/science/article/pii/S0167404823003772 1 65dab76d-9824-11ee-bb90-0050569b8976 https://repozitorij.uni-lj.si/Dokument.php?lang=slv&id=178637 Fakulteta za računalništvo in informatiko 0 0 0