Purpose–This paper aims to provide an overview of theories used in the field of employees'
information systems (IS) security behavior over the past decade. Research gaps and …

Purpose–The purpose of this study is to determine the main challenges that IT security
practitioners face in their organizations, including the interplay among human …

It is increasingly acknowledged that many threats to an organisation's computer systems can
be attributed to the behaviour of computer users. To quantify these human-based …

The home computer user is often said to be the weakest link in computer security. They do
not always follow security advice, and they take actions, as in phishing, that compromise …

It is often observed that addressing security can be as much about people as it is
technology. One of the key aspects here is establishing the correct mindset, and ensuring …

The application of information security technologies do not always result in improved
security. Human factors play a significant role in computer security factors such as individual …

Purpose–The purpose of this paper is to investigate the human-based information security
(InfoSec) vulnerabilities in three Australian government organisations. Design/methodology …

In this study, we sought to answer the question of whether certain information security
awareness message themes are more or less effective for different types of individuals …

Slowly but surely, academia and industry are fully accepting the importance of the human
element as it pertains to achieving security and trust. Undoubtedly, one of the main …

This article contends that information security education, training and awareness programs
can improve employee security behavior. Empirical studies have analyzed the direct effects …