•  
  •  
 

Journal of Information Technology Theory and Application (JITTA)

Abstract

The prevention of IT security incidents is a great challenge for organizations. Senior management is allocating more resources to IT security programs, especially to educating and training employees in order to reduce human misbehavior which is a significant cause of IT security incidents. Building on the results of a literature review, this paper identifies factors which affect the success of security education, training and awareness (SETA) programs and organizes them in a conceptual classification. The classification contains human influencing factors which lead to IT security compliance and noncompliance, derived from different behavioral, decision-making as well as criminology theories. It delivers a comprehensive and structured overview of these factors and shows the correlations between them. The classification can be used to guide the design and development of SETA programs as well as the establishment of suitable conditions for the programs’ integration in organizations.

Share

COinS