Fulfilling the Needs for Information Security Awareness and Learning in Information Society

In information society and business world, there are different levels of needs for information security awareness and learning, e.g. the needs for ordinary citizens, business leaders, and experts. Users of information systems – factually all members of society – should have at least basic literacy of information security. In the day-to-day business life, advanced skills of information security awareness are needed by business managers. At the expert level, the developers of technical and organizational solutions for the Information and Communication Technology (ICT) need to have a wide understanding of information security threats and opportunities and related solutions. Information security officers or managers have a key role in organizations in developing and maintaining their organizations’ systematic approach of information security according to the organizations’ business needs. It is essential that the learning methodologies can answer to the needs of all different actors in society. In this paper, we analyze these needs and the type and contents of learning needed and consider the development in training, education and learning from traditional approaches to new challenges.