Change search
CiteExportLink to record
Permanent link

Direct link
Cite
Citation style
  • apa
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Other style
More styles
Language
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Other locale
More languages
Output format
  • html
  • text
  • asciidoc
  • rtf
Exploring Experiences of Using SETA in Nordic Municipalities
Högskolan i Skövde, Institutionen för informationsteknologi.ORCID iD: 0000-0002-7462-1809
Högskolan i Skövde, Institutionen för informationsteknologi.ORCID iD: 0000-0003-2084-9119
Högskolan i Skövde, Institutionen för informationsteknologi.ORCID iD: 0000-0001-5962-9995
2021 (English)In: Human Aspects of Information Security and Assurance: 15th IFIP WG 11.12 International Symposium, HAISA 2021, Virtual Event, July 7–9, 2021, Proceedings / [ed] Steven Furnell; Nathan Clarke, Cham: Springer , 2021, p. 22-31Conference paper, Published paper (Refereed)
Abstract [en]

User behavior is a key aspect of cybersecurity and it is well documented that insecure user behavior is the root cause of the majority of all cybersecurity incidents. Security Education, Training, and Awareness (SETA) is described by practitioners and researchers as the most important tool for improving cybersecurity behavior and has been for several decades. Further, there are several ways to work with SETA found in academic literature and a lot of research into various aspects of SETA effectiveness. However, the problem of insecure user behavior remains revealing a need for further research in the domain. While previous research have looked at the users’ experience of SETA, this study looks at SETA adoption from the perspective of the adopting organization. For this purpose, a survey was sent out to all Nordic municipalities with the intent of measuring if and how SETA is conducted, and how the respondents would ideally like to conduct SETA. The results show that a majority of the participating organizations use SETA and that e-learning is the most common delivery method. However, the results also show that gamification and embedded training is seldom used in practice nor a part of the participants’ picture of ideal SETA.

Place, publisher, year, edition, pages
Cham: Springer , 2021. p. 22-31
Series
IFIP Advances in Information and Communication Technology, ISSN 1868-4238, E-ISSN 1868-422X ; 613
National Category
Information Systems
Research subject
INF303 Information Security; Information Systems
Identifiers
URN: urn:nbn:se:hj:diva-62722DOI: 10.1007/978-3-030-81111-2_3ISI: 000763607200003Scopus ID: 2-s2.0-85112297686ISBN: 978-3-030-81111-2 (electronic)ISBN: 978-3-030-81110-5 (print)ISBN: 978-3-030-81113-6 (print)OAI: oai:DiVA.org:hj-62722DiVA, id: diva2:1806942
Conference
15th IFIP WG 11.12 International Symposium on Human Aspects of Information Security and Assurance, HAISA 2021, Virtual Event, July 7–9, 2021
Available from: 2021-08-17 Created: 2023-10-24Bibliographically approved

Open Access in DiVA

No full text in DiVA

Other links

Publisher's full textScopus

Authority records

Kävrestad, JoakimNohlberg, Marcus

Search in DiVA

By author/editor
Salek, Aous AlKävrestad, JoakimNohlberg, Marcus
Information Systems

Search outside of DiVA

GoogleGoogle Scholar

doi
isbn
urn-nbn

Altmetric score

doi
isbn
urn-nbn
Total: 59 hits
CiteExportLink to record
Permanent link

Direct link
Cite
Citation style
  • apa
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Other style
More styles
Language
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Other locale
More languages
Output format
  • html
  • text
  • asciidoc
  • rtf