Information security awareness level evaluation among Bulgarian public and local administration employees

Abstract

A number of studies show that the human factor is among the weakest elements in today’s interconnected network environment. The development of a methodology for raising awareness of vulnerabilities, threats and solutions in the field of information security through training and thus increasing the overall level of security of users and organizations is the main goal of the project “Immersive Learning in Information Security” (MISSILE). The tasks of the project include defining the user needs and requirements in the field of information security training and developing a concept for information security training, covering the main problems related to the most important modern challenges in the field. In order to assess the level of knowledge and skills of the target group on the technical aspects, legal provisions and economic aspects of information security, their needs and expectations from an electronic course on information security, a survey was conducted. This report presents the main results of this survey.