Investigating the knowledge-behaviour gap in mitigating personal information compromise

Jasmine Scott; Jacques Ophoff

Investigating the knowledge-behaviour gap in mitigating personal information compromise

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

54 Downloads (Pure)

Abstract

In response to information threats users instinctively increase security measures, such as firewalls and anti-virus software. However, users do not give enough attention to their behaviour, more specifically, their security behavioural practices. This paper proposes that the knowledge-behaviour gap affects a user’s security behavioural practices and this, in effect, threatens personal information security. The knowledge-behaviour gap assesses why users do not put their information security and privacy knowledge into practice. The Information-Motivation-Behavioural Skills Model is used to highlight the different factors which affect the knowledge-behaviour gap, with empirical data collected using an online survey. Despite the wide conformity of opinions within literature, a key finding of this research is that users’ awareness of information security threats has an insignificant effect on their self-reported preventive behaviour. The significance of this finding is that users require a deeper technical understanding of information security threats to engage in effective preventive behaviour.

Original language	English
Title of host publication	Proceedings of the Twelfth International Symposium on Human Aspects of Information Security & Assurance (HAISA 2018)
Editors	Nathan Clarke, Steven Furnell
Place of Publication	Plymouth
Publisher	Univerisity of Plymouth
Pages	236-245
Number of pages	10
ISBN (Print)	9780244402549
Publication status	Published - 9 Sep 2018
Externally published	Yes
Event	12th International Symposium on Human Aspects of Information Security & Assurance - Dundee Business School, Abertay University, Dundee, United Kingdom Duration: 29 Aug 2018 → 31 Aug 2018 Conference number: 12 http://www.haisa.org/?page=home

Conference

Conference	12th International Symposium on Human Aspects of Information Security & Assurance
Abbreviated title	HAISA 2018
Country/Territory	United Kingdom
City	Dundee
Period	29/08/18 → 31/08/18
Internet address	http://www.haisa.org/?page=home

Keywords

Information security
Personal information compromise
Behavioural skills
Motivation
Preventive behaviour
Knowledge-behaviour gap
Information-motiation-behavioural (IMB) skills model

UN SDGs

This output contributes to the following UN Sustainable Development Goals (SDGs)

Access to Document

Ophoff_InvestigatingTheKnowledge-BehaviourGap_Published_2018Final published version, 486 KB

https://www.cscan.org/?page=openaccess&eid=20&id=393Licence: Other

Jacques Ophoff
- j.ophoffabertay.acuk
- Division of Cybersecurity - Senior Lecturer
Person: Academic

Cite this

@inproceedings{497f8cd0b9444ccb98f8f335642ce173,

title = "Investigating the knowledge-behaviour gap in mitigating personal information compromise",

abstract = "In response to information threats users instinctively increase security measures, such as firewalls and anti-virus software. However, users do not give enough attention to their behaviour, more specifically, their security behavioural practices. This paper proposes that the knowledge-behaviour gap affects a user{\textquoteright}s security behavioural practices and this, in effect, threatens personal information security. The knowledge-behaviour gap assesses why users do not put their information security and privacy knowledge into practice. The Information-Motivation-Behavioural Skills Model is used to highlight the different factors which affect the knowledge-behaviour gap, with empirical data collected using an online survey. Despite the wide conformity of opinions within literature, a key finding of this research is that users{\textquoteright} awareness of information security threats has an insignificant effect on their self-reported preventive behaviour. The significance of this finding is that users require a deeper technical understanding of information security threats to engage in effective preventive behaviour.",

author = "Jasmine Scott and Jacques Ophoff",

year = "2018",

month = sep,

day = "9",

language = "English",

isbn = "9780244402549",

pages = "236--245",

editor = "Nathan Clarke and Steven Furnell",

booktitle = "Proceedings of the Twelfth International Symposium on Human Aspects of Information Security & Assurance (HAISA 2018)",

publisher = "Univerisity of Plymouth",

note = "12th International Symposium on Human Aspects of Information Security & Assurance, HAISA 2018 ; Conference date: 29-08-2018 Through 31-08-2018",

url = "http://www.haisa.org/?page=home",

}

Scott, J & Ophoff, J 2018, Investigating the knowledge-behaviour gap in mitigating personal information compromise. in N Clarke & S Furnell (eds), Proceedings of the Twelfth International Symposium on Human Aspects of Information Security & Assurance (HAISA 2018). Univerisity of Plymouth, Plymouth, pp. 236-245, 12th International Symposium on Human Aspects of Information Security & Assurance, Dundee, United Kingdom, 29/08/18. <https://www.cscan.org/?page=openaccess&eid=20&id=393>

Investigating the knowledge-behaviour gap in mitigating personal information compromise. / Scott, Jasmine; Ophoff, Jacques.

Proceedings of the Twelfth International Symposium on Human Aspects of Information Security & Assurance (HAISA 2018). ed. / Nathan Clarke; Steven Furnell. Plymouth : Univerisity of Plymouth, 2018. p. 236-245.

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

TY - GEN

T1 - Investigating the knowledge-behaviour gap in mitigating personal information compromise

AU - Scott, Jasmine

AU - Ophoff, Jacques

N1 - Conference code: 12

PY - 2018/9/9

Y1 - 2018/9/9

N2 - In response to information threats users instinctively increase security measures, such as firewalls and anti-virus software. However, users do not give enough attention to their behaviour, more specifically, their security behavioural practices. This paper proposes that the knowledge-behaviour gap affects a user’s security behavioural practices and this, in effect, threatens personal information security. The knowledge-behaviour gap assesses why users do not put their information security and privacy knowledge into practice. The Information-Motivation-Behavioural Skills Model is used to highlight the different factors which affect the knowledge-behaviour gap, with empirical data collected using an online survey. Despite the wide conformity of opinions within literature, a key finding of this research is that users’ awareness of information security threats has an insignificant effect on their self-reported preventive behaviour. The significance of this finding is that users require a deeper technical understanding of information security threats to engage in effective preventive behaviour.

AB - In response to information threats users instinctively increase security measures, such as firewalls and anti-virus software. However, users do not give enough attention to their behaviour, more specifically, their security behavioural practices. This paper proposes that the knowledge-behaviour gap affects a user’s security behavioural practices and this, in effect, threatens personal information security. The knowledge-behaviour gap assesses why users do not put their information security and privacy knowledge into practice. The Information-Motivation-Behavioural Skills Model is used to highlight the different factors which affect the knowledge-behaviour gap, with empirical data collected using an online survey. Despite the wide conformity of opinions within literature, a key finding of this research is that users’ awareness of information security threats has an insignificant effect on their self-reported preventive behaviour. The significance of this finding is that users require a deeper technical understanding of information security threats to engage in effective preventive behaviour.

M3 - Conference contribution

SN - 9780244402549

SP - 236

EP - 245

BT - Proceedings of the Twelfth International Symposium on Human Aspects of Information Security & Assurance (HAISA 2018)

A2 - Clarke, Nathan

A2 - Furnell, Steven

PB - Univerisity of Plymouth

CY - Plymouth

T2 - 12th International Symposium on Human Aspects of Information Security & Assurance

Y2 - 29 August 2018 through 31 August 2018

ER -

Investigating the knowledge-behaviour gap in mitigating personal information compromise

Abstract

Conference

Keywords

UN SDGs

Access to Document

Fingerprint

Profiles

Jacques Ophoff

Cite this