engleski

Analysis of Information Security Awareness in a State Administration Body

Nowadays, information is regarded as an asset both for individuals and organizations. One of the greatest risks to an organization’s information security is often not a weakness in technology, software or equipment. It is rather action or inaction of employees when handling information that can lead to security incidents. Therefore, an analysis of information security awareness was conducted in a state administration body of the Republic of Croatia. The results obtained indicate that there is a need to raise employees’ general information security awareness, in particular in regard to password policy and social engineering threats and/or attacks. Based on the results obtained, guidelines for further improvement of information security awareness are provided.

information security awareness; human error; state administration body

nije evidentirano