Security Education, Training, and Awareness Programs: Literature Review

ABSTRACT

Security education, training, and awareness (SETA) is one of the most common and prominent strategies for organizational security governance. However, only a small portion of practitioners claimed that their SETA programs were “very effective”. A possible reason for this is the lack of a systematic understanding of the nature of SETA programs, the paths through which SETA impacts employees’ security-related beliefs or behavioral intentions, and the conditions that might influence such a relationship. This study argues that a comprehensive literature review regarding SETA is vital for holistically investigating the findings of previous SETA research and unveiling the characteristics and factors that influence the effectiveness of SETA. A total of 80 articles, published between 1998 and 2020, were included to conduct an in-depth systematic review on SETA.

KEYWORDS:

• SETA
• security education
• training
• awareness
• organizational security

Additional information

Funding

This work was supported by the National Natural Science Foundation of China [71871162, 72011530135]; Program for Professor of Special Appointment (Eastern Scholar) at Shanghai Institutions of Higher Learning [TP2018016].