Information Technology Safety Awareness – a review of regularly used terms and methods

Abstract

Over the last twenty years there have been enormous advances in the field of Information Technology. There is a quite well-defined need on information security and of course awareness. Problems with human behavior in an information security context are assumed to be caused by a lack of facts available to the audience. Awareness therefore is largely treated as the broadcast of facts to an audience in the hope that behavior improves. This study targets three different but connecting topics. First, reviews, the definition of Awareness and based on it creates an overview of different definitions. Second, reviews the information security awareness training, pitfalls and outcomes. And last but not least gives a non-technical way to reach people (end-users) and gives possible ways to change their behavior according to information security related topics.