Improving information security awareness and behaviour through dialogue, participation and collective reflection. An intervention study

Computers and Security

Volumn 29, Issue 4, 2010, Pages 432-445

  Albrechtsen, Eirik ^a,b   Hovden, Jan ^a  

^a NORWEGIAN UNIVERSITY OF SCIENCE AND TECHNOLOGY   (Norway)

^b SINTEF TECHNOLOGY AND SOCIETY   (Norway)

Author keywords

Awareness; Behaviour; Information security; Intervention study; Participation; Training

Indexed keywords

CONTROL GROUPS; EMAIL MESSAGES; EMPLOYEE PARTICIPATION; EXPERIMENTAL RESEARCH; FORMAL PRESENTATION; GROUP PROCESS; INFORMATION SECURITY; INFORMATION SECURITY AWARENESS; LARGE POPULATION; STATISTICAL ANALYSIS; TOPDOWN;

PERSONNEL; TECHNICAL PRESENTATIONS;

REFLECTION;

EID: 77951204516     PISSN: 01674048     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.cose.2009.12.005     Document Type: Article

References (27)

1. Adams A., and Sasse M.A. Users are not the enemy. Communications of the ACM 42 12 (1999) 41-46
2. Adler P.S., and Winograd T. The usability challenge. In: Adler P.S., and Winograd T. (Eds). Usability - turning technologies into tools (1992), Oxford University Press, New York
3. Albrechtsen E., and Hovden J. User participation in information security. In: Aven T., and Vinnem J.E. (Eds). Risk, reliability and social safety: proceedings of the European safety and reliability conference 2007 (Esrel 2007) (2007), Taylor & Francis, London 2551-2558
4. Albrechtsen E. A qualitative study of users' view on information security. Computers and Security 26 4 (2007) 276-289
5. Argyris C., and Schön D. Organizational learning II (1996), Addison Wesley, New York
6. Besnard D., and Arief B. Computer security impaired by legitimate users. Computers and Security 23 3 (2004) 253-264
7. Ehn P. Scandinavian design: on participation and skill. In: Adler P.S., and Winograd T. (Eds). Usability - turning technologies into tools (1992), Oxford University Press, New York
8. Elden M. Democratisation and participative research in developing local theory. Journal of Occupational Behaviour 4 1 (1983) 21-33
9. Goldenhar L.M., and Schulte P.A. Intervention research in occupational health and safety. Journal of Occupational Medicine 36 7 (1994)
10. Greenberg E.S. The consequences of worker participation: a clarification of the theoretical literature. Social Science Quarterly 56 2 (1975) 191-209
11. Greenwood D.J., and Levin M. Introduction to action research (1998), SAGE Publications, Thousand Oaks, CA
12. Hubbard W. Methods and techniques of implementing a security awareness program (2002), SANS Institute white paper
13. Kristensen T.S. Intervention studies in occupational epidemiology. Occupational and Environmental Medicine 62 3 (2005) 205-210
14. Leiulfrud H., and Hvinden B. Analyse av kvalitative data: fikserbilde eller puslespill? (Qualitative data analysis: puzzle picture or jigsaw puzzle?). (in Norwegian). In: Holter H., and Kalleberg R. (Eds). Kvalitative metoder i samfunnsvitenskapene (1996), Universitetsforlaget, Oslo, Norway
15. Levin M., and Klev R. Forandring som praksis. Læring og utvikling i organisasjoner (Change as practise. Learning and development in organisations). (in Norwegian) (2002), Fagbokforlaget, Bergen, Norway
16. Levin M., and Rolfsen M. Arbeid i team (Work in teams). (in Norwegian) (2004), Fagbokforlaget, Bergen, Norway
17. Lund J., and Aarø L.A. Accident prevention. Presentation of a model placing emphasis on human, structural and cultural factors. Safety Science 42 4 (2004) 271-324
18. Nonaka I., and Takeuchi H. The knowledge-creating company (1995), Oxford University Press, New York
19. Post G.V., and Kagan A. Evaluating information security tradeoffs: restricting access can interfere with user tasks. Computers and Security 26 7 (2007) 589-599
20. Ringdal K. Enhet og mangfold, samfunnsvitenskaplig forskning og kvantitativ metode (Unity and diversity, social research and quantitative methods). (in Norwegian) (2001), Fagbokforlaget, Bergen, Norway
21. Robson L.S., Shannon H.S., Goldenhar L.M., and Hale A.R. Guide to evaluating the effectiveness of strategies for preventing work injuries: how to show whether a safety intervention really works. NIOSH Publication No. 2001-119 (2001), NIOSH, Cincinnati, OH
22. Shrader-Frechette K.S. Risk and rationality (1991), University of California Press, Oxford
23. Stanton J.M., Stam K.R., Mastrangelo P., and Jolton J. Analysis of end user security behaviours. Computers and Security 24 2 (2005) 124-133
24. Strauss A., and Corbin J. Basics of qualitative research (1998), SAGE Publications, Thousand Oaks, CA
25. Thagaard T. Systematikk og innlevelse. En innføring i kvalitativ metode (Introduction to qualitative methods). (in Norwegian) (2002), Fagbokforlaget, Bergen, Norway
26. Voss B.D. The ultimate defense of depth: security awareness in your company (2001), SANS Institute white paper
27. Weick K.E. Sensemaking in organizations (1996), SAGE Publications, Thousand Oaks, CA