Show simple item record

dc.contributor.authorNkonge, Regina Kagwiria
dc.date.accessioned2017-11-20T10:08:20Z
dc.date.available2017-11-20T10:08:20Z
dc.date.issued2017
dc.identifier.urihttp://hdl.handle.net/11071/5617
dc.descriptionThesis submitted in partial fulfillment of the requirements for the Degree of Master of Science in Information Systems Security (MSc.ISS) at Strathmore Universityen_US
dc.description.abstractCyber-attacks are continuously evolving to a great extent faster than cyber defences. The result is an ever-increasing frequency of attacks and the probability of success over time. To ensure employees are able to avoid or counter information security attacks directed at them and the organisation, it is necessary to carry out continuous security awareness and training, and, ensure this training is relevant to employees. Existing tools to assess information security skills among employees generally require the expertise of technical persons and are often not well tailored to an organisations’ specific needs. This study aims at developing a prototype which organisations can use to create information security skills assessments for their employees. Employees can then log in to the prototype at their convenient time and take the assessment. At the end of the assessment, each employee receives a percentage mark of their performance. Based on this percentage the employee is ranked as either beginner, intermediate or advanced and is also given a list of their weak areas based on questions they got wrong. The weak areas can be used to identify gaps and this information used to customise security awareness and training programs to meet employees’ needs. The research study adopted agile development methodology to design and develop a prototype to address identified gaps. The prototype was tested and validated to ensure it meets the intended goals and recorded impressive results.en_US
dc.language.isoenen_US
dc.publisherStrathmore Universityen_US
dc.subjectInformation Security Skillsen_US
dc.subjectInformation Security Awarenessen_US
dc.subjectInformation Security Educationen_US
dc.subjectInformation Security Trainingen_US
dc.subjectInformation Security Skills Assessmenten_US
dc.titleA Web based information security skills assessment prototypeen_US


Files in this item

Thumbnail

This item appears in the following Collection(s)

Show simple item record