Evaluating information security awareness: the importance of information security, a case study of SME's-aerospace technology systems corporation / Norliana Mustafa

This study is concerned with information security awareness among SME (small and medium enterprise). Previous study had identified that due to the distinct characteristics of SME's, these organisations usually take a more slight approach to information security management than larger enterprise...

Full description

Saved in:

Bibliographic Details
Main Author:	Mustafa, Norliana
Format:	Thesis
Language:	English
Published:	2013
Subjects:	Risk management Risk in industry Operational risk
Online Access:	https://ir.uitm.edu.my/id/eprint/65878/1/65878.pdf
Tags:	Add Tag No Tags, Be the first to tag this record!

id	my-uitm-ir.65878
record_format	uketd_dc
spelling	my-uitm-ir.658782022-09-26T06:54:03Z Evaluating information security awareness: the importance of information security, a case study of SME's-aerospace technology systems corporation / Norliana Mustafa 2013 Mustafa, Norliana Risk management. Risk in industry. Operational risk Computer security. Security measures. Data recovery. Disaster recovery This study is concerned with information security awareness among SME (small and medium enterprise). Previous study had identified that due to the distinct characteristics of SME's, these organisations usually take a more slight approach to information security management than larger enterprises. Most SME's are not prepared to adopt and practice information security due to the lack the funds, knowledge and specialised resources. Without a proper attention for security, it can become a source of significant risks against the organisation. Information security is increasingly becomes as one of a critical elements in an organisation. Information security awareness has become one of vital elements in ensuring the security and protection of the organisations assets. Therefore, this study is to evaluate information security awareness among SME's in order to gain an understanding of the employees' information security awareness. The data gathering instruments employed in this research are questionnaires survey that will identify and evaluate information security awareness of an SME organisation. Aerospace Technology Systems Corporation (ATSC) was chosen as the subject of the study. A survey was performed which resulted in a total of 85 respondents. The assessment of this study is based on KAB (knowledge, attitude and behaviour) model and CIA (confidentiality, integrity and availability). The findings of this study present the information security awareness of the employees which indicate that employees that possess information security knowledge, attitude and behaviour (KAB) tend to have higher information security awareness in ensuring the confidentiality, integrity, and availability (CIA) of business information. Some recommendation was made to reflect areas for improvement to increase employees' information security awareness. 2013 Thesis https://ir.uitm.edu.my/id/eprint/65878/ https://ir.uitm.edu.my/id/eprint/65878/1/65878.pdf text en public masters Universiti Teknologi MARA (UiTM) Faculty of Computer and Mathematical Sciences Kaur, Jasber
institution	Universiti Teknologi MARA
collection	UiTM Institutional Repository
language	English
advisor	Kaur, Jasber
topic	Risk management Risk in industry Operational risk Risk management Risk in industry Operational risk
spellingShingle	Risk management Risk in industry Operational risk Risk management Risk in industry Operational risk Mustafa, Norliana Evaluating information security awareness: the importance of information security, a case study of SME's-aerospace technology systems corporation / Norliana Mustafa
description	This study is concerned with information security awareness among SME (small and medium enterprise). Previous study had identified that due to the distinct characteristics of SME's, these organisations usually take a more slight approach to information security management than larger enterprises. Most SME's are not prepared to adopt and practice information security due to the lack the funds, knowledge and specialised resources. Without a proper attention for security, it can become a source of significant risks against the organisation. Information security is increasingly becomes as one of a critical elements in an organisation. Information security awareness has become one of vital elements in ensuring the security and protection of the organisations assets. Therefore, this study is to evaluate information security awareness among SME's in order to gain an understanding of the employees' information security awareness. The data gathering instruments employed in this research are questionnaires survey that will identify and evaluate information security awareness of an SME organisation. Aerospace Technology Systems Corporation (ATSC) was chosen as the subject of the study. A survey was performed which resulted in a total of 85 respondents. The assessment of this study is based on KAB (knowledge, attitude and behaviour) model and CIA (confidentiality, integrity and availability). The findings of this study present the information security awareness of the employees which indicate that employees that possess information security knowledge, attitude and behaviour (KAB) tend to have higher information security awareness in ensuring the confidentiality, integrity, and availability (CIA) of business information. Some recommendation was made to reflect areas for improvement to increase employees' information security awareness.
format	Thesis
qualification_level	Master's degree
author	Mustafa, Norliana
author_facet	Mustafa, Norliana
author_sort	Mustafa, Norliana
title	Evaluating information security awareness: the importance of information security, a case study of SME's-aerospace technology systems corporation / Norliana Mustafa
title_short	Evaluating information security awareness: the importance of information security, a case study of SME's-aerospace technology systems corporation / Norliana Mustafa
title_full	Evaluating information security awareness: the importance of information security, a case study of SME's-aerospace technology systems corporation / Norliana Mustafa
title_fullStr	Evaluating information security awareness: the importance of information security, a case study of SME's-aerospace technology systems corporation / Norliana Mustafa
title_full_unstemmed	Evaluating information security awareness: the importance of information security, a case study of SME's-aerospace technology systems corporation / Norliana Mustafa
title_sort	evaluating information security awareness: the importance of information security, a case study of sme's-aerospace technology systems corporation / norliana mustafa
granting_institution	Universiti Teknologi MARA (UiTM)
granting_department	Faculty of Computer and Mathematical Sciences
publishDate	2013
url	https://ir.uitm.edu.my/id/eprint/65878/1/65878.pdf
_version_	1783735583537889280

Evaluating information security awareness: the importance of information security, a case study of SME's-aerospace technology systems corporation / Norliana Mustafa

Similar Items