This paper discusses the common misconception of using the terms cyber security and information security interchangeably. While there is a significant overlap between the two, they are not entirely synonymous. The paper suggests that cyber security extends beyond the scope of traditional information security, encompassing not only the safeguarding of information resources but also other assets, including individuals themselves. In the context of information security, the human factor typically pertains to the roles humans play in the security process. However, in cyber security, this factor takes on an additional dimension, with humans potentially being targets of cyber attacks or even unwitting participants in such attacks. This added dimension carries ethical implications for society at large, as protecting certain vulnerable groups, such as children, could be viewed as a societal responsibility.
Research on the effectiveness of cyber security awareness in ICS Risk Assessment Frameworks
Evaluating the awareness of security among users plays a critical role in safeguarding Industrial Control Systems...