Optimizing ICT Compliance Training for Enhanced Security and Employee Integrity

Ahmed Maher Mohamed Ismail Ali

Master's thesis

Abstract:

In Ensuring the integrity and security of data is essential in today's business climate that is centered around information technology. This thesis aims to determine the optimal technique for ICT compliance training that may effectively strengthen security measures and foster employee honesty. The study examines the influence of live sessions and e-learning on employee conduct and corporate security through a quantitative approach, utilizing surveys from two multinational IT firms. The study assesses alterations in behavior, effectiveness in reducing data breaches, and compliance with security standards. The results indicate that live training sessions are highly efficient in promoting rapid comprehension and involvement, but they need a significant amount of resources and are difficult to expand. On the other hand, e-learning platforms provide flexibility and provide constant delivery of content, resulting in improved long-term retention. However, they may not offer rapid feedback and engagement. An optimal strategy was discovered by integrating both methodologies, resulting in enhanced advantages and guaranteeing thorough implementation and strengthening of compliance principles. The main suggestion is to introduce a blended training program that combines live sessions for comprehensive initial learning and e-learning for continuous reinforcement. Furthermore, it is advisable to often revise training material to align with current security risks and compliance obligations and to include interactive and hands-on components to sustain interest and participation. The examination of ten cybersecurity incidents highlights the necessity for thorough training programs. This thesis provides practical recommendations for improving ICT compliance training, which will help IT organizations and policymakers in mitigating security risks and promoting a culture of integrity and ethical awareness within IT companies.

Abstract:

In Ensuring the integrity and security of data is essential in today's business climate that is centered around information technology. This thesis aims to determine the optimal technique for ICT compliance training that may effectively strengthen security measures and foster employee honesty. The study examines the influence of live sessions and e-learning on employee conduct and corporate security through a quantitative approach, utilizing surveys from two multinational IT firms. The study assesses alterations in behavior, effectiveness in reducing data breaches, and compliance with security standards. The results indicate that live training sessions are highly efficient in promoting rapid comprehension and involvement, but they need a significant amount of resources and are difficult to expand. On the other hand, e-learning platforms provide flexibility and provide constant delivery of content, resulting in improved long-term retention. However, they may not offer rapid feedback and engagement. An optimal strategy was discovered by integrating both methodologies, resulting in enhanced advantages and guaranteeing thorough implementation and strengthening of compliance principles. The main suggestion is to introduce a blended training program that combines live sessions for comprehensive initial learning and e-learning for continuous reinforcement. Furthermore, it is advisable to often revise training material to align with current security risks and compliance obligations and to include interactive and hands-on components to sustain interest and participation. The examination of ten cybersecurity incidents highlights the necessity for thorough training programs. This thesis provides practical recommendations for improving ICT compliance training, which will help IT organizations and policymakers in mitigating security risks and promoting a culture of integrity and ethical awareness within IT companies.

Keywords

ICT Compliance Training, Information Security, Employee Integrity, Ethics in IT, Corporate Data Security, E-Learning in Compliance, Organizational Security Measures, Employee Behavior and Compliance, Security Training Effectiveness, Compliance Training Methods, Cybersecurity Training, Hybrid Training Methods, Regulatory Compliance in IT, Ethical Governance, Compliance Program Evaluation

Keywords

ICT Compliance Training, Ethics in IT, Corporate Data Security, E-Learning in Compliance, Employee Behavior and Compliance, Security Training Effectiveness, Regulatory Compliance in IT, Information Security, Employee Integrity, Organizational Security Measures, Compliance Training Methods, Ethical Governance, Compliance Program Evaluation, Cybersecurity Training, Hybrid Training Methods

Language used: English

Date on which the thesis was submitted / produced: 27. 6. 2024

Thesis defence

• Date of defence: 2024
• Supervisor: Tomáš Sigmund
• Reader: Ladislav Luc

Vysoká škola ekonomická v Praze

Master programme:
Information Systems Management