The Value and Assessment of Information Security Education and Training

Information security education and training needs to be valued and assessed from various perspectives. This study presents two differing viewpoints from which such an evaluation can be perceived – those of the individual and the organisation. Some sorts of profits are sought after by each of the two, although this is expressed and hence valued differently depending on the perspective taken. We examine the need for measuring the effect information security education and training, in addition to identifying possible techniques and problems connected with doing this in practice.