SartCyber Security Awareness Measurement Model (APAT)

Critical Information Infrastructures are constantly under the threat from various forms of cyber-attacks. Over the past few years adversaries have found ways to develop malwares which are specifically designed to hit the target and have also been quite successful as well. This also shows that adversaries are much ahead in terms of their strategy and are technically skilled to outpace the traditional controls. An analysis of last few cyber-attack trend provides a very insightful information that most of the attacks are initiated by targeting the end user. Hence end user is seen as a weak link. Also in most of the organizations cyber security trainings are limited to security team members without giving much importance to the normal users. Therefore if employees are not trained enough to recognize a security threat, they cannot be expected to avoid it, report it or remove it. Employees need cybersecurity awareness and training to protect themselves and the company against new evolving cyber-attacks. By making employees aware of new forms of security threats and what measures to follow when a suspicious activity is identified, we can then strengthen the most vulnerable links in the chain.