Investigating effects of security incident awareness on information risk perception
by Antonio P. Volpentesta, Salvatore Ammirato, Roberto Palmieri
International Journal of Technology Management (IJTM), Vol. 54, No. 2/3, 2011

Abstract: This article describes an empirical investigation about the relationship between what is known about information security incidents which occurred within an organisation and the actual perception of information risk. Information security incident awareness takes into account an estimation of the frequency of incidents which occurred in the past as well as the magnitude of information assets impairment caused by them. Information risk perception relies on a subjective assessment of the expected frequency of a specified type of incident having a potentially adverse effect on information resources as well as the expected magnitude of the consequent future loss. Survey instruments were distributed to information security managers of 101 Italian companies and data were collected through telephone interviews. Hypotheses about the influence of two awareness factors (namely, information security incident reporting and existence of an information security policy) on risk perceived by information security managers are formulated and tested through ANOVA techniques.

Online publication date: Sat, 06-Apr-2013

The full text of this article is only available to individual subscribers or to users at subscribing institutions.

 
Existing subscribers:
Go to Inderscience Online Journals to access the Full Text of this article.

Pay per view:
If you are not a subscriber and you just want to read the full contents of this article, buy online access here.

Complimentary Subscribers, Editors or Members of the Editorial Board of the International Journal of Technology Management (IJTM):
Login with your Inderscience username and password:

Username:        Password:          Forgotten your password?

Want to subscribe?
A subscription gives you complete access to all articles in the current issue, as well as to all articles in the previous three years (where applicable). See our Orders page to subscribe.

If you still need assistance, please email subs@inderscience.com