e-Infrastructure and e-Services for Developing Countries. 9th International Conference, AFRICOMM 2017, Lagos, Nigeria, December 11-12, 2017, Proceedings

Research Article

The Role of Culture in the Design of Effective Cybersecurity Training and Awareness Programmes. A Case Study of the United Arab Emirates (UAE)

Download
249 downloads
  • @INPROCEEDINGS{10.1007/978-3-319-98827-6_11,
        author={Abdulla Al Neaimi and Philip Lutaaya},
        title={The Role of Culture in the Design of Effective Cybersecurity Training and Awareness Programmes. A Case Study of the United Arab Emirates (UAE)},
        proceedings={e-Infrastructure and e-Services for Developing Countries. 9th International Conference, AFRICOMM 2017, Lagos, Nigeria, December 11-12, 2017, Proceedings},
        proceedings_a={AFRICOMM},
        year={2018},
        month={8},
        keywords={Training and awareness Culture Cybersecurity United Arab Emirates (UAE) Information and Communication Technology (ICT) Internet of Things (IoT)},
        doi={10.1007/978-3-319-98827-6_11}
    }
    
  • Abdulla Al Neaimi
    Philip Lutaaya
    Year: 2018
    The Role of Culture in the Design of Effective Cybersecurity Training and Awareness Programmes. A Case Study of the United Arab Emirates (UAE)
    AFRICOMM
    Springer
    DOI: 10.1007/978-3-319-98827-6_11
Abdulla Al Neaimi1,*, Philip Lutaaya1,*
  • 1: SecureTech, LLC
*Contact email: alneaimi@gmail.com, lutaphilo@gmail.com

Abstract

The question whether culture of a society needs to be considered when designing cybersecurity training and awareness programs has recently risen in literature. While some programs may be effective in the west, they may not apply in the Middle East or Africa. Since cybersecurity has overtaken terrorism as the leading security concern globally, criticality of user training and awareness programmes cannot be overemphasized. This paper demonstrates that a cybersecurity training or awareness program that considers cultures of the people is more effective than generic one. Staff in a midsized organization were randomly divided into two groups. Group one consisting of Indians was treated to a culturally sensitive training programme in Hindi while group two consisting of Ugandans, Nepalese, Pakistanis and the Philippines undertook a generic one in English. A survey was conducted subsequent to the treatments. Results revealed that group one demonstrated better understanding of cybersecurity issues after one month.