The Effect of Applying Information Security Awareness Concept of MOH Employees on Cybersecurity Department – Ministry of Health-Riyadh
Article content
Abstract
The proposed study focuses on the effect of applying the concept of information security awareness of MOH employees on the cybersecurity department at the Ministry of Health in Riyadh. The researcher used the descriptive analytical method in order to achieve the study objectives and used a questionnaire for collecting data. The study sample consisted of around (430) of MOH employees. The results of the study showed a high level of agreement on answering its questions. The study yielded numerous recommendations; it stressed that spreading the culture of awareness on the importance of personal information, through holding workshops, is considered as the most effective way to reduce cybersecurity risks. Also, it showed that the cybersecurity department is keen to develop guidelines to be followed by employees in order to limit the sharing of personal information and that paramount importance should be attached to the human element by familiarizing it with the tricks used by cybercriminals. In addition, the cybersecurity department is keen to create an electronic archive that includes monitoring and recording of cybersecurity incidents and should encourage employees to view this archive and consider it as a means of exchanging knowledge and raising awareness. Moreover, it is imperative to use the contribution of information security experts in order to design awareness programs. In addition, advanced technical training should be directed to employees to keep pace with the rapid development in methods and techniques of information crime. The researcher achieved various design of training and education program.
Keywords
Ministry of Health, Cybersecurity, Information Security, Cybersecurity Department, Awareness
Downloads
References
N. S. Safa, C. Maple, T. Watson, and R. Solms, “Motivation and opportunity based model to reduce information security insider threats in organisations,” J. Inf. Secur. Appl., vol. 40, pp. 247-257, 2018, doi: 10.1016/j.jisa.2017.11.001.
J. Torous, K. Myrick, N. Rauseo-ricupero, and J. Firth, “Digital Mental Health and COVID - 19 : Using Technology Today to Accelerate the Curve on Access and Quality Tomorrow,” JMIR Ment. Health, vol. 7, no. 3, Art. no. e18848, 2020, doi: 10.2196/18848.
M. Thangavelu, V. Krishnaswamy, and M. Sharma, “Impact of Comprehensive Information Security Awareness and Cognitive Characteristics on Security Incident Management – An empirical study,” Comput. Secur., vol. 109, p. 102401, Oct. 2021, doi: 10.1016/j.cose.2021.102401.
Ministry of Health, “Health Statistics Annual Book.”
C. A. Sanders, “Social Engineering Knowledge Measured as a Security Countermeasure,” M. S. thesis, Coll. Eng. Comput., Univ. South Carolina, South Carolina, USA, 2018.
J.-L. Vez and U. Damachi, “Guidance on Public- Private Information Sharing against Cybercrime,” Jan 2017. [Online]. Available: https://www3.weforum.org/docs/WEF_Guidance_Cybercrime_report_2017.pdf
K. A. Alshare, P. L. Lane, and M. R. Lane, “Information security policy compliance : a higher education case study,” Inf. Comput. Secur., vol. 26, no. 1, pp. 91-108, 2018, doi: 10.1108/ICS-09-2016-0073.
P. Schaab, K. Beckers, and S. Pape, “Social Engineering Defence Mechanisms and counteracting Training Strategies,” Inf. Comput. Secur., vol. 25, no. 2, pp. 206-222, 2017, doi: 10.1108/ICS-04-2017-0022.
M. Yar, “Oxford Research Encyclopedia of Criminology” May 2017. [Online]. Available: https://www.shortcutstv.com/blog/wp-content/uploads/2020/02/Online_Crime._In_Oxford_Research_Encyclo.pdf
M. Whitman and H. Mattord, Principles of Information Security, 4th ed., Boston, MA, USA: Course Technology, 2011.
V. P. Talimonchik, "Legal Aspects of International Information Security," in Security and Privacy From a Legal, Ethical, and Technical Perspective, London, United Kingdom: IntechOpen, 2019, ch. 1.
A. Serkov, V. Kravets, O. Kasilov, B. Lazurenko, and A. Mickus, “THE CONCEPT OF INFORMATION SECURITY IN THE IOT SYSTEM," Adv. Inf. Syst., vol. 3, no. 1, pp. 136-139, 2019, doi: 10.20998/2522-9052.2019.1.23.
K. Prislan, A. Mihelič, and I. Bernik, “A real-world information security performance assessment using a multidimensional socio-technical approach,” Plos One, vol. 15, no. 9, Art. no. e0238739, 2020, doi: 10.1371/journal.pone.0238739.
A. Mousa, M. Karabatak, and T. Mustafa, "Database Security Threats and Challenges," in 2020 8th Int. Symp. Digit. Forensics Secur. (ISDFS), 2020, pp. 1-5, doi: 10.1109/ISDFS49300.2020.9116436.
M. Zwilling, G. Klien, D. Lesjak, Ł. Wiechetek, F. Cetin, and H. N. Basim, “Cyber Security Awareness , Knowledge and Behavior : A Comparative Study,” J. Comput. Inf. Syst., vol. 62, no. 1, pp. 1–16, 2022, doi: 10.1080/08874417.2020.1712269.
S. H. Jore, “The Conceptual and Scientific Demarcation of Security in Contrast to Safety,” Eur. J. Secur. Res., vol. 4, no. 1, pp. 157–174, 2019, doi: 10.1007/s41125-017-0021-9.
S. Grades et al., “Study of Baseline Cyber Security for Various Application Domains,” IOP Conf. Ser.: Mater. Sci. Eng., vol. 1099, p. 012051, 2021, doi: 10.1088/1757-899X/1099/1/012051.
S. Bauer, E. W. N. Bernroider, and K. Chudzikowski, “Prevention is better than cure ! Designing information security awareness programs to overcome users ’ non-compliance with information security policies in banks,” Comput. Secur., vol. 68, pp. 145–159, 2017, doi: 10.1016/j.cose.2017.04.009.
B. Hanus and Y. Wu, “Impact of Users ’ Security Awareness on Desktop Security Behavior : A Protection Motivation Theory Perspective,” Inf. Syst. Manag., vol. 33, no. 1, 2016, doi: 10.1080/10580530.2015.1117842.
J. P. Adhikari, A. Sharma, and “An introduction to cyber crimes and role of cyber- security in information technology,” Int. J. IT & Eng., vol. 05, no. 04, pp. 13–20, 2017.
P. Dolan, M. Hallsworth, D. Halpern, D. King, and I. Vlaev, “Influencing behaviour through public policy,” 2010.
S. Ziam, P.-E. Arduin, and D. Vieru, “Strategies to Reduce Knowledge Leakage: A Knowledge Absorptive Capacity-Based Framework," in 19th Euro. Conf. Knowledge Manag., Italy, 2018, pp. 1186-1189.
G. Hofstede, G. J. Hofstede, and M. Minkov, Cultures and Organizations. USA: McGraw-Hill, 2010.
M. Bada and A. Sasse, “Cyber Security Awareness Campaigns Why do they fail to change behaviour ?,” 2014. [Online]. Available: https://discovery.ucl.ac.uk/id/eprint/1468954/1/Awareness%20CampaignsDraftWorkingPaper.pdf
B. Khan, K. S. Alghathbar, S. I. Nabi, and M. K. Khan, “Effectiveness of information security awareness methods based on psychological theories,” Afr. J. Bus. Manag., vol. 5, no. 26, pp. 10862–10868, 2011, doi: 10.5897/AJBM11.067.
Article details
This work is licensed under a Creative Commons Attribution-NonCommercial 4.0 International License.
You must read and accept the copyright terms and conditions(click here for copyright terms).