Abstract—The development of information technology has a
positive impact on business environment and at the same time, a
negative impact on various security threats. Organizations try
to implement various countermeasures for preventing security
incident. However they tend to rely on technical security
solution and security incidents are not possible to prevent
completely. Recently, People Centric Security as a new
approach has become an issue and the security education for
changing the behavior of employees is emphasized. However,
most organizations have difficulty in expecting any changes in
behavior of employees because security education regards as a
formal activity for compliance. Moreover, few previous security
education-related researches studied the relevance of the
educational contents necessary for employees with the
behavioral changes in students and security experts. The
purpose of this research is to provide security education
framework for employee's behavior change based on pedagogy
and social psychology. In addition, some future researches that
overcome the limitation of this research for effective security
education program were proposed.
Index Terms—Security education, social psychology, people
centric security.
Kunwoo Kim, Myeong-Gyun Song, and Jungduk Kim are with the
Department of Security Convergence, Graduate School of Chung-Ang
University, Seoul, Republic of Korea (e-mail: kunwoo.kim317@gmail.com,
a50692911@gmail.com, jdkimcau@gmail.com).
Cite: Kunwoo Kim, Myeong-Gyun Song, and Jungduk Kim, "A Research on Security Education Framework for Employee’s Behavior Change," International Journal of Information and Education Technology vol. 8, no. 1, pp. 68-72, 2018.