Security awareness training : Impact of security awareness training on employee attitudes, behaviors, and organizational cybersecurity: A study in medium-sized companies

Abstract: This research study investigates the efficacy of security awareness training programs in managing information security threats. Through a systematic literature review (SLR) and multiple interviews, the research explains the interplay between employees' security knowledge, attitudes, and behaviors in the context of these training programs. It demonstrates that appropriately designed training initiatives can lead to improved threat detection, reporting rates, and overall security-conscious behavior. The study also highlights the role of written policies, standards, and governance documents in guiding and shaping these programs. The interviews bring in practical perspectives, validating and complementing academic findings. Overall, this study highlights the significance of security training programs in creating a work environment that is alert against cyber threats.