A research on information security awareness of employees in public institutions: Diyarbakir example

The purpose of this study is to raise the awareness and awareness of information security among personnel working in public institutions and to make suggestions in areas that need improvement. It is to measure the information security awareness of personnel working in randomly selected public institutions in Diyarbakır province by using various data and statistics. "Information Security Awareness Scale" was applied to a total of 164 personnel working at various levels. In this study, concepts related to information and information security, which constitute the framework of the research, information security elements, its purpose and importance, threats, common problems experienced, precautions to be taken, information security awareness are emphasized. As a result of the factor analysis, it was investigated whether the scale consists of 31 items and whether it differs according to the variables of the personnel's age, gender, education level, type of job, tenure, how many years they have been using the internet and daily internet usage time. In this context, the data obtained in the research were examined with the Kaiser- Mayer-Olkin (KMO) Test and Bartlett Sphericity Test. The KMO value is close to 1; Bartlett's test of sphericity was found to be significant and the p value was less than 0.05. Cranbach Alpha reliability value is 0.971. Then, Kruskall Wallis and Mann-Whitney U tests were used to identify groups with significant differences. As a result of the research, there is a difference in information security awareness sub-factors according to the gender of the personnel and the information security awareness of men and women (p <0.05). In both information security awareness and factors, the average score of men is higher than that of women. There is no significant difference according to age, type of duty, education level and daily internet usage time and duration of duty (p>0.05). There is a significant difference in information security awareness and its first factor according to the variable of years of internet use (p<0.05). Those with 20 years or more have higher information security awareness. However, in the second factor, there is no significant difference between the participants' information security awareness (p>0.05).