Workshopbeitrag
Information Security Policy Usability Scale: A Questionnaire for Evaluating the Usability of Information Security Policies
Lade...
Volltext URI
Dokumententyp
Text/Workshop Paper
Zusatzinformation
Datum
2024
Autor:innen
Zeitschriftentitel
ISSN der Zeitschrift
Bandtitel
Verlag
Gesellschaft für Informatik e.V.
Zusammenfassung
Effective information security policies are crucial for organisations to mitigate information security threats and risks. However, poorly designed information security policies can lead to hidden costs and decreased compliance in daily work routines. While behavioural factors like social norms, positive attitudes, and knowledge are well known to influence compliance, the usability of information security policies, which takes the context of use seriously, remains understudied,. To address this, we introduce the Information Security Policy Usability Scale (ISPUS), an adaptation of the widely recognised System Usability Scale (SUS). ISPUS assesses the usability of information security policies. Thereby, it supports both companies and works councils in ensuring the fit of the work context, individual skills, tools and the policy. By applying ergonomic principles, ISPUS aims to enhance information security policy design and support organisational security efforts.