Robust Information Security for Strengthening HR in Organizations
Saeed Hameed Aldulaimi, Marwan M. Abdeldayem, Ibrahim A. Abu-AlSondos, Laiali Almazaydeh, Ibrahim Ali Alnajjar, Alaa S. Mushtaha
Abstract
Enhancing information security has become a necessary and comprehensive cybersecurity mission. In today's landscape, operating systems and software have become more secure, leading attackers to exploit the human element as a means to breach organizational information systems. As the frequency and sophistication of cyber-attacks targeting unsuspecting personnel continue to rise, the significance of the human factor in information security management cannot be understated. Effective security awareness is crucial in countering these attacks that exploit human vulnerabilities, aiming to mitigate security risks. This study focuses on the development of an interdisciplinary training and educational model specifically designed for human resources to elevate their understanding of cybersecurity protocols. The research proposes a professional framework encompassing various methodologies to heighten security awareness, including online training materials, contextual training, and embedded training. The findings reveal that a combination of delivery methods outperforms a singular approach, resulting in heightened security awareness among individuals. Through implementing this comprehensive training model, organizations can bolster their information security posture by empowering employees with the knowledge and skills necessary to effectively combat evolving cyber threats.