Review of knowledge base according to Information Technology Safety Awareness

Abstract

The majority of cyberattacks are targeting companies, government or service provider parties, but attacks and threats are not limited to these parties. Also, the most challenging in defense side to raise awareness of the employees, but these employees most of their time are people who are enjoys the benefits of technology and uses it in their private life. Recently, according to IT Security Technology evolution, from Information System perspective, the human is the weakest link. This is supported by increased Social Engineering activity due pandemic reasons. This paper reviews the recent attacks and techniques according to increased e-commerce, internet and mobile activity. The goal of this review is to highlight how the usage of Information Technology and Information Communication Technology changed and review the connected fields, specially, the change in human side. This review defines new ways to achieve safe and secure usage through Information Technology Safety Awareness beyond Company Policy driven Information Security Awareness which is predefined in NIST SP-800-50 in 2003. The NIST standard suggests awareness training where it blurs compliance with corporate policy and basic, user knowledge. This review points out is that blending Information Technology Safety Awareness is problematic and straightening it up is a possible way to make user insecurity less of a problem.

The majority of cyberattacks are targeting companies, government or service provider parties, but attacks and threats are not limited to these parties. Also, the most challenging in defense side to raise awareness of the employees, but these employees most of their time are people who are enjoys the benefits of technology and uses it in their private life. Recently, according to IT Security Technology evolution, from Information System perspective, the human is the weakest link. This is supported by increased Social Engineering activity due pandemic reasons. This paper reviews the recent attacks and techniques according to increased e-commerce, internet and mobile activity. The goal of this review is to highlight how the usage of Information Technology and Information Communication Technology changed and review the connected fields, specially, the change in human side. This review defines new ways to achieve safe and secure usage through Information Technology Safety Awareness beyond Company Policy driven Information Security Awareness which is predefined in NIST SP-800-50 in 2003. The NIST standard suggests awareness training where it blurs compliance with corporate policy and basic, user knowledge. This review points out is that blending Information Technology Safety Awareness is problematic and straightening it up is a possible way to make user insecurity less of a problem.