Employee Attitudes Towards Information Security Policies – Identifying Archetypes Using Machine Learning

Loading...
Thumbnail Image

URL

Journal Title

Journal ISSN

Volume Title

School of Business | Bachelor's thesis

Date

Major/Subject

Mcode

Language

en

Pages

21+12

Series

Abstract

Information security at workplaces has become a frequent topic as new cases of breached corporations keep appearing in the news. The amount of data that is handled increases year-on-year and its inherent value grows more appealing to black hat hackers. Corporations are expected to guard private information, and yet their spending on information security has remained low. Special attention should be paid to employees as they are often the weakest link in terms of information security. This thesis investigates how employees can be categorized based on their risk level. It identifies factors that affect an individuals’ likelihood of complying with information security policies and conducts an empirical cluster analysis to verify previous findings. The analysis showed that factors such as age, conformity of the working environment and training significantly affect the probability of an employee complying with the set rules. Some determinants identified by previous research did not replicate their impact in the results of this survey. It is recommended that employers provide tailored training according to their employees’ weak spots and encourage positive conformity in teams.

Description

Thesis advisor

Seppälä, Tomi

Other note

Citation