A Comparison Between IT Workers and End-Users Outlook on the Soundness of Information Security Measures in Saudi Arabian Organizations

Abstract

This paper presents a comparative analysis of the perspectives of IT workers and end-users on the situation of information security measures based on selective results of a survey of IT workers and end-users conducted to produce a much needed insight into the status of information security in the Kingdom of Saudi Arabian (KSA) organizations. The main aim of this research is to determine what end-users know and think about the state of information assurance in the country, and to better understand the prevalent ground realities. The survey covered the following eight areas: Awareness, network access, security breaches, email usage, password policy, computer configuration control, antivirus protection, and business continuity planning. This study is important for information security researchers as well as practitioners to realize the difference in perception about important information security issues between IT workers and end-users. It attempts to cover a gap in the existing literature about the status of information security as viewed by the computer users of Saudi Arabian organizations. Keywords: information security measures, IT workforce, end-users, Saudi