Publication Date

Spring 5-1-2025

School

Center for Computer and Information Technology; School of Business

Major

Information Technology

Keywords

social engineering, cyberattack, security awareness training

Disciplines

Technology and Innovation

Abstract

Small and medium-sized enterprises (SMEs) are increasingly becoming prime targets for cybercriminals due to their limited IT expertise, inadequate cybersecurity investment, and insufficient security awareness training. The increasing sophistication of social engineering attacks are rendering traditional security awareness programs obsolete, as they fail to effectively promote behavior change. The proposed solution develops a software-based security awareness training program that integrates interactive activities, realistic scenarios, and gamified learning methods to engage employees and facilitate long-term behavioral change towards security awareness. Future research should focus on evaluating the effectiveness of the proposed training program in real-world scenarios to measure its impact on security behaviors within SMEs.

Share

COinS