摘要：The purpose of this study is to identify the most effective countermeasure for information security in organizations and to suggest ways to increase information security awareness using the countermeasure. Information security countermeasures include information security policy, information security education and training program, security education frequency, response cost, and management attention. We found that security awareness education and training is the most effective mean for information security in financial firms. Conclusions and implications are discussed for increasing the effective of security awareness education and training program.
关键词：Information Security; Information Security Education; Information Security Training; Security;Policy; Finance Firms
