Statistical Analysis on Relation between Workers’ Information Security Awareness and the Behaviors in Japan

This paper discusses the relationship between information security awareness and behavior by analyzing data collected from a Web-based survey on information security measures in Japan. First, it is found that individuals would not have problematic behavior from the viewpoint of information security measures if the individual’s awareness is higher. Next, it is found that the awareness of individuals who have problematic behavior despite being totally prohibited in the enterprise is different from individuals who do not have problematic behavior, and the awareness of individuals in the latter group is larger than the awareness of individuals in the former group, with a slightly higher probability.