Open AccessAn Assessment of Employee Knowledge, Awareness, Attitude towards Organizational Cybersecurity in Cameroon
Author(s) -
Fosoh Holiness Nikel,
Austin Oguejiofor Amaechi
Publication year - 2022
Publication title -
network and communication technologies
Language(s) - English
Resource type - Journals
eISSN - 1927-0658
pISSN - 1927-064X
DOI - 10.5539/nct.v7n1p1
Subject(s) - enabling , promotion (chess) , resilience (materials science) , security awareness , element (criminal law) , self awareness , knowledge management , compromise , public relations , business , computer security , psychology , information security , computer science , political science , social psychology , physics , politics , law , psychotherapist , thermodynamics
In our increasingly digitized and interconnected society, people are poorly protected against cyberthreats, with the main reason being user behavior. Human behavior and actions are unpredictable in nature and this make human an important element and enabler of cybersecurity. The objective of the study is promotion of adoption of non-technical countermeasures (such as user awareness) for a comprehensive and holistic way to manage cyber security in organizations in Cameroon. We conducted a subjective study to measure the level of employees’ knowledge and general awareness, risky behavior they engage in, and attitude toward various aspects of cybersecurity and cyberthreats to show the need for user education, training, and awareness. For the study described in this paper, a self-report questionnaire was developed and data were collected from 214 participants. The results of a descriptive statistic percentage indicated that less than 50% of respondents have completed or has regular training program. We find that over 61% of the participants do not have sufficient knowledge of their organization cyber security policies. Among other findings, the over 60% of employees’ mistakes or violations of security policy are not disciplined or penalized is a demonstration of lack of legal status of cyber-attacks. Cyber resilience in any organization is a responsibility shared by both management and employees. Proactive human management element that can actively hunt for malicious activity and indicators of compromise is recommended.