Metrics for smart security awareness

Abstract

Technology has integrated with society resulting in the dependence of its availability to conduct daily activities. In the corporate domain the availability of information is critical to decision making as it affects the bottom line of the business. Also, the compromise of information could have detrimental effects on the organization as investors and customers could lose confidence. Information Communication Technology (ICT) users need to made aware of their responsibilities for protecting data and assets. Security awareness can help enable users with the necessary knowledge to operate in the ICT domain more safely. Smart security awareness will consist of proactive measures and mechanisms in systems that will automatically detect when users are moving away from safe practices. This paper will discuss the practical implementation of metrics within a smart security awareness system to promote safe security practices. The application of proactive mechanisms will help reduce security breaches. This paper introduces the concept of smart security awareness. However, measuring the effectiveness of smart security awareness can be challenging. This research proposes customised smart security awareness metrics that can help assess smart security awareness more effectively. In this paper, a more proactive smart security awareness system and metrics are proposed, which integrates various measurement tools. Overall, the research aims to provide a more practical approach for establishing and assessing smart security awareness in an organization. In general, the proposed metrics can serve as an important tool to improving security in an organization. The use of more innovative metrics can help assess security awareness more effectively.