Participant Information

Developing a cybersecurity training needs assessment system for organisations

You are being invited to take part in a research study. Before you decide, it is important for you to understand why the research is being done and what it will involve. Please take time to read the following information carefully. Please contact Charlotte Morton if you would like to discuss the research or for any further information. Take time to decide whether or not you wish to take part.

What is the purpose of the study?

The main aim of this research project is to explore the most effective way of ensuring individuals in an organisation have fit-for-purpose tailored cybersecurity training. This is based on an assessment of current cybersecurity knowledge and job roles. Tailoring training based on an individual’s current cybersecurity knowledge and job role is at the core of this research. Your participation in the research will help develop a system that organisations could use with their employees to identify gaps in their cybersecurity knowledge in order to offer tailored recommended courses.

Why have I been chosen?

Based on your current role it is anticipated that you will be able to inform the study in terms of helping define the base level of cybersecurity awareness within organisations.

Do I have to take part?

It is up to you to decide whether or not to take part. If you decide to take part, as part of the pre assessment survey you will sign the consent form. If you decide to take part, you are free to withdraw at any time without giving a reason. A decision to withdraw at any time, or a decision not to take part, will not affect you in any way.

What will happen to me if I take part?

You will be asked to fill in a short pre-assessment survey and then take an online assessment that is designed to assess your cyber awareness level in the relation to your role. You will then be provided with an outcome identifying gaps in your knowledge where training may be recommended. During the post assessment survey you will be asked to provide feedback on the Cyber Awareness Platform and your result to help improve this work in progress. You may be asked to repeat the assessment and provide feedback a number of times after modifications have been made. No-one nor your place of work will be identifiable in the final report.

What are the possible disadvantages and risks of taking part?

As the prototype system will be providing feedback on your answers and it is in early stages of development it could output inaccurate results. This may lead to a drop in confidence if the outcome is unexpected, however you should not worry as it is still under development and your feedback will help improve the system.

What are the possible benefits of taking part?

By taking part, you will be contributing to the development of a an asessment tool that can potentially be used to identify and create tailored cyber awareness training courses for employees within organisations.

What if something goes wrong?

If you have any concerns or complaints please contact the the Acting Dean of the Faculty of Science, Business and Enterprise, University of Chester.

Will my taking part in the study be kept confidential?

No personally identifable information is collected for the survey or user testing. All information which is collected during the course of the research will be kept strictly confidential.

What will happen to the results of the research study?

The results will be written up into a PhD thesis. Individuals who participate will not be identified in the this research or any subsequent report or publication.

Who is organising the research?

The research is conducted as part of a PhD programme within the School of Computer and Engineering Sciences at the University of Chester. The research is organised, with supervision from the school, by Charlotte Morton, a PhD candidate.

Who may I contact for further information?

If you would like more information about the research before you decide whether or not you would be willing to take part, please contact:

Charlotte Morton. 0818685@chester.ac.uk.

Retention and publication of participant’s data

Participants should note that data collected from this research may be retained and published in an anonymised form. By agreeing to participate in this project, you are consenting to the retention and publication of data.

Participant consent

1. I confirm that I have read and understand the information sheet for the above study and have had the opportunity to ask questions.
2. I understand that my participation is voluntary and that I am free to withdraw at any time, without giving any reason and without my legal rights being affected.
3. I agree to take part in the above study.

Thank you for your interest in this research.