Balancing software and training requirements for information security

Fujs, Damjan (avtor), Vrhovec, Simon (avtor), Vavpotič, Damjan (avtor)

Information security is one of the key areas of consideration to assure reliable and dependable information systems (IS). Achieving an appropriate level of IS security requires concurrent consideration of the technical aspects of IS and the human aspects related to the end users of IS. These aspects can be described in the form of information security requirements. We propose an approach that helps select and balance information security software requirements (iSSR) and information security training requirements (iSTR) according to the information security performance of end users. The approach was tested in an experiment involving 128 IS professionals. The results showed that using the proposed approach helps IS professionals with limited experience in information security make significantly better decisions regarding iSSR and iSTR.

• Jezik: Angleški jezik
• Ključne besede: cyber security, experiment, information security standard, requirements engineering, end user training, information security
• Vrsta gradiva: Članek v reviji
• Tipologija: 1.01 - Izvirni znanstveni članek
• Organizacija: FRI - Fakulteta za računalništvo in informatiko
• Status publikacije: Objavljeno
• Različica publikacije: Objavljena publikacija
• Leto izida: 2023
• Št. strani: 13 str.
• Številčenje: Vol. 134, art. 103467
• PID: 20.500.12556/RUL-152910
• UDK: 659.2:004
• ISSN pri članku: 0167-4048
• DOI: 10.1016/j.cose.2023.103467
• COBISS.SI-ID: 163668739
• Datum objave v RUL: 11.12.2023

Gradivo je del revije

• Naslov: Computers & security
• Skrajšan naslov: Comput. secur.
• Založnik: Elsevier
• ISSN: 0167-4048
• COBISS.SI-ID: 5878279

Licence

• Licenca: CC BY 4.0, Creative Commons Priznanje avtorstva 4.0 Mednarodna
• Povezava: http://creativecommons.org/licenses/by/4.0/deed.sl
• Opis: To je standardna licenca Creative Commons, ki daje uporabnikom največ možnosti za nadaljnjo uporabo dela, pri čemer morajo navesti avtorja.

Sekundarni jezik

• Jezik: Slovenski jezik
• Ključne besede: kibernetska varnost, eksperiment, informacijskovarnostni standardi, inženirstvo zahtev, usposabljanje končnih uporabnikov, informacijska varnost