The effect of a university information security survey on instruction methods in information security

ABSTRACT

This paper reports on the need for Information Security Awareness educational programs to supplement teaching in Information Security. The need for such a program is demonstrated by findings resulting from a survey of university faculty and staff at Armstrong Atlantic State University conducted from February through April 2005 regarding the information security behaviors of such employees.

REFERENCES

• 1: AASU Campus IT Documents (Policies). Retrieved March 28, 2005, from http://www.cis.armstrong/edu/cispolicies/index.html
• 2: Gartenberg, Marc. Simple steps for raising the security bar at your company. (2005, March 30) Retrieved April 8, 2005, from http://www.computerworld.com/printthis/2005/0,4814,100589,00.html
• 3: Hall, Mark Secure the People. (2005, March 21) Retrieved April 8, 2005, from http://www.computerworld.com/printthis/2005/0,4814,100448.00.html
• 4: Risks of File-Sharing Technology. Retrieved April 8, 2005, from http://www.us-cert.gov/cas/tips/ST05-007.html
• 5: Roberts, Paul. Web postcards hide Trojan horse programs. (2005, April 5) Retrieved April 8, 2005, from http://www.computerworld.com/printthis/2005/0,4814,100874,00.html
• 6: UGA - Security Awareness, Training and Education (SATE). Retrieved April 8, 2005 from http://www.infosec.uga.edu/sate/
• 7: Verinder, Matthew. Study: More identity theft off-line than online. (2005, January 28) Retrieved April 8, 2005, from http://www.computerworld.com/printthis/2005/0,4814,99329,00.html
• 8: Weiss, Todd R. Laptop with 98,000 names stolen from UC-Berkeley. (2005, March 29) Retrieved March 30, 2005, from http://www.computerworld.com/hardwaretopics/hardware/story/0,10801,100712,00.html
• 9: Whitman, Michael E. & Mattord, Herbert J. Principles of Information Security 2003 Boston: Thomson Course Technology, pp. 44--45

INDEX TERMS

Primary Classification:
  C. Computer Systems Organization
  C.2 COMPUTER-COMMUNICATION NETWORKS
      C.2.0 General
          Subjects: Security and protection (e.g., firewalls)

Additional Classification:
  D. Software
  D.4 OPERATING SYSTEMS
      D.4.6 Security and Protection

  K. Computing Milieux
  K.3 COMPUTERS AND EDUCATION
      K.3.2 Computer and Information Science Education
  K.4 COMPUTERS AND SOCIETY
      K.4.1 Public Policy Issues
          Subjects: Abuse and crime involving computers
      K.4.2 Social Issues
          Subjects: Abuse and crime involving computers**
      K.4.4 Electronic Commerce
          Subjects: Security
  K.6 MANAGEMENT OF COMPUTING AND INFORMATION SYSTEMS
      K.6.5 Security and Protection (D.4.6, K.4.2)

General Terms:
Human Factors, Legal Aspects, Management, Security, Standardization

Keywords:
curriculum development, curriculum instruction, information assurance, information assurance curriculum, information security, information security curriculum