Review of information security guidelines for awareness training program in healthcare industry

Human errors are known as the most serious threats to information security in Electronic Health Record systems. Nevertheless, human errors can be prevented through effective information security awareness training programs. Even though there is an increasing number of training and awareness programs in the area of information security, there is limited evidence to verify their effectiveness in a real job environment. The aim of this paper is to review and evaluate some of the existing guidelines for developing an awareness training program. These guidelines can help organizations to identify security awareness training needs and develop a training plan. However, Despite the valuable inputs provided by these guidelines, there are shortcomings that are discussed in this paper.