Designing a Cyber-security Culture Assessment Survey Targeting Critical Infrastructures During Covid-19 Crisis

TL;DR

This paper presents a survey design to assess cybersecurity culture in critical infrastructures during COVID-19, focusing on organizational and individual levels across multiple security dimensions, providing insights during a global crisis.

Contribution

It introduces a novel framework and survey methodology for evaluating cybersecurity culture in critical infrastructures amid a pandemic, highlighting its first application and findings.

Findings

Insights into cybersecurity culture during COVID-19

Framework's applicability in crisis conditions

Identification of key security dimensions

Abstract

The paper at hand presents the design of a survey aiming at the cyber-security culture assessment of critical infrastructures during the COVID-19 crisis, when living reality was heavily disturbed and working conditions fundamentally affected. The survey is rooted in a security culture framework layered into two levels, organizational and individual, further analyzed into 10 different security dimensions consisted of 52 domains. An in-depth questionnaire building analysis is presented focusing on the aims, goals, and expected results. It concludes with the survey implementation approach while underlining the framework's first application and its revealing insights during a global crisis.