NotesFAQContact Us
Collection
Advanced
Search Tips
Back to results
ERIC Number: ED655231
Record Type: Non-Journal
Publication Date: 2021
Pages: 141
Abstractor: As Provided
ISBN: 979-8-5825-5901-6
ISSN: N/A
EISSN: N/A
Available Date: N/A
The Effectiveness of Cybersecurity Awareness Training in Reducing Employee Negligence within Department of Defense (DoD) Affiliated Organizations-Qualitative Exploratory Case Study
Letitia Griffin
ProQuest LLC, D.I.T. Dissertation, Capella University
The purpose of this study is to add to the body of knowledge regarding the impact of cybersecurity awareness training programs and how effective and efficient the program is in DoD affiliated organizations. The general problem addressed in the present study was that there has been an increase in security breaches within Department of Defense (DoD) affiliated organizations due to employee negligence and ineffective cybersecurity awareness training. The study was guided by a single research question that asked: How effective is the cybersecurity awareness training in reducing employee negligence within DoD-affiliated organizations? The study was conducted using a qualitative case study methodology to explore the increasing trend of employee negligence and effective cybersecurity awareness training in organizations. The significance of the research will contribute to the body of knowledge concerning effective cybersecurity training and reducing employee negligence. The population in this single case study was DoD-affiliated professionals who are required to complete the annual cybersecurity awareness training with one year experience as a current DoD employee. Through exploratory qualitative research, analyzed data collected through semistructured interviews recognized contributing factors of the studied phenomenon. Four distinct themes emerged during the data analysis process, and each theme disclosed the effectiveness of the annual cybersecurity awareness training in reducing employee negligence. The themes identified include (a) training, (b) security risks, (c) security policies and access controls, and (d) leadership awareness. The first finding was DoD-affiliated professionals stated the annual cybersecurity awareness training needed to be increased throughout the year. The second finding was participants stated security policies were outdated, and employees didn't adhere to the policies. The third finding was individuals having proper restrictions and access to systems to perform their daily functions. The final finding was leadership awareness and being actively involved in cybersecurity training programs. The themes were further supported by narrative quotes by the participants and contemporary academic literature. As a result of the participants' responses, the findings led to further research could yield additional opportunities for researchers to enhance the relevance of implementing cybersecurity awareness training programs within organizations beyond DoD-affiliated agencies. [The dissertation citations contained here are published with the permission of ProQuest LLC. Further reproduction is prohibited without permission. Copies of dissertations may be obtained by Telephone (800) 1-800-521-0600. Web page: http://www.proquest.com/en-US/products/dissertations/individuals.shtml.]
ProQuest LLC. 789 East Eisenhower Parkway, P.O. Box 1346, Ann Arbor, MI 48106. Tel: 800-521-0600; Web site: http://www.proquest.com/en-US/products/dissertations/individuals.shtml
Publication Type: Dissertations/Theses - Doctoral Dissertations
Education Level: N/A
Audience: N/A
Language: English
Sponsor: N/A
Authoring Institution: N/A
Grant or Contract Numbers: N/A
Author Affiliations: N/A