Information security awareness, phishing exercise and training of a small-scale industrial engineering company

• Main Author: Fuentes, Vijielyn Javier
• Format: text
• Language: English
• Published: Animo Repository 2023
• Subjects: Phishing; Data protection; Information Security
• Online Access: https://animorepository.dlsu.edu.ph/etdm_comtech/27
• Institution: De La Salle University

Security Awareness Training plays a vital role in the organization, particularly in small business enterprises, by providing essential knowledge on securing every asset and information against cyber threats. This study aims to initiate security awareness training for a small business industrial company that will help the management to have fundamental knowledge and tips on how cyber threats may affect their business. The training methodology includes simulated pre-training phishing emails sent out to the target recipients and a short security course accessible through a learning management system. Afterward, a post-phishing email training is sent out to assess the knowledge of the management that they comprehend from the security course. Additionally, the participant’s feedback is gathered through an assessment form, which provides valuable insights into the effectiveness of the security awareness training. The study promotes a sense of security consciousness by enhancing the management’s awareness of security best practices and identifying potential risks within the organization.