A large number of people who work in companies, enterprises and large public and private sector organizations ignore topics related with IT security and its scope. Lack of awareness in security requirements and control needs on the end of system administrators, operators, developers and users could represent the most important risk for any organization.
Consequently, diverse entities have set out the task to analyze the origin of the main cyber attacks and have concluded that nowadays, the vast majority of attacks related with IT security are originated from the inside of a company (unhappy employees, frauds, non-authorized accesses, absence of organizational training, etc.). That is why is of vital importance to design, develop, implement and maintain awareness-raising strategies towards the personnel who take part in the company with the aim to prevent and reduce the odds where an adverse event can occur compromising the confidentiality, integrity and readiness of the information.
