Analysis and evaluation of information systems security awareness in Kuwait University

Other Title(s)

تحليل و تقييم الوعي الأمني لنظم المعلومات في جامعة الكويت

Dissertant

al-Kandari, Sulayman Muhammad Habib

Thesis advisor

Abd al-Raziq, Rifat Hasan
al-Alawi, Adil Ismail

University

Arabian Gulf University

Faculty

College of Graduate Studies

Department

Technology Management Program

University Country

Bahrain

Degree

Master

Degree Date

2012

English Abstract

In today world, where most organizations utilize the various technologies related to Information Systems (IS) to meet the business requirements, the issue of Information Systems Security Awareness (ISSA) became very important.

Therefore, it is important for organizations to evaluate the level of ISSA, to be sure that the level is adequate or find the shortcomings and set the appropriate actions.

While the literature showed many studies regarding ISSA, there was no clear and precise published work that provides a system capable of evaluating the level of ISSA at Kuwait University (KU).

The objectives of this study were to evaluate the levels of knowledge, attitude, and behavior of the end-users regarding ISSA at KU, and to identify the areas of ISSA which require attention.

In order to achieve these objectives, several steps were carried out.

First, the literature was critically reviewed and the factors affecting human awareness were identified as: knowledge, attitude and behavior.

Second, the Value-Focus-Thinking (VFT) was used to identify ISS focus-areas.

The following six ISS focus-areas were obtained: Commitment to ISS Policy (FA-1), Effective Use of Passwords (FA-2), Safe Usage of Internet and Email (FA-3), Being Aware of ISS Threats (FA-4), Backing up the Important Files (FA-5), and Required Updates for Operating System and Antivirus Program (FA-6).

Third, a questionnaire was designed based on the human awareness factors and the ISS focus-areas.

The research population included the end-users of KU colleges.

ISSA level was evaluated based on the levels of end-users' knowledge, attitude and behavior toward the six obtained ISS focus-areas.

The study results showed that the overall levels of ISSA, knowledge, and behavior were medium, while the overall attitude level was poor.

The evaluation addressed the levels of ISSA, knowledge, attitude and behavior regarding each of the six focus-areas in detail.

The results of evaluating each of the fourteen colleges at KU revealed that the overall ISSA were: poor in seven colleges, medium in five colleges and good in two colleges only.

The study recommended some appropriate actions to improve the overall levels of knowledge, iv attitude and behavior, with the priority for improving the attitude due to its poor level.

Regarding the colleges, the study recommended to give priority for improvement to the seven colleges that got poor levels of ISSA.

Main Subjects

Electronic engineering

Topics

• Universities
• Colleges
• Kuwait
• Computer networks
• Security measures

No. of Pages

93

Table of Contents

• APA
• MLA
• AMA

Language

English

Data Type

Arab Theses

Record ID

BIM-372341