Evaluation of IT System Security Training Success

With all the efforts put into IT system security, the issue remains of what the level of such security is and how sure we are that our IT system is secure. The paper starts with the assumption that users are one of the most important components of IT system security, and an aware and trained user takes much more care about security in his daily activities. Such system will have less security incidents, which should reduce the possibility of infiltration by malevolent users or programs. Training is one of the mechanisms for affecting user behavior. The management of user training in the area of security is a demanding process. To implement is efficiently, we need information on training success evaluation. The paper proposes a training success evaluation model using fuzzy logic.