Enhancing cybersecurity awareness strategies in organization using Delphi technique

Abstract

Cybersecurity concerns were once primarily perceived as technical issues, prompting many organizations to prioritize investments in security technologies. However, it has become increasingly evident that cybersecurity is not solely a technical matter. In fact, a significant number of cybersecurity breaches arise from users' lack of awareness about secure technological practices. This research aims to develop a cybersecurity awareness strategy using the Delphi technique over three rounds, involving 15 cybersecurity experts. The findings indicate a consensus among experts that cybersecurity awareness training is an effective strategy to enhance an organization's overall cybersecurity posture. However, the true essence of cybersecurity lies in fostering secure technology usage practices among all users within the organization. To address this, the researcher developed systematic training content for cybersecurity awareness, which was evaluated and refined by experts using the Delphi technique to ensure its effectiveness in promoting genuine cybersecurity awareness.