Key informant frequency and coded excerpt distribution for each CSF
| Lifecycle phase | CSF (ranked order within lifecycle phase) | Category | Coded excerpts | KI frequency | CSF rank |
|---|---|---|---|---|---|
| Design | CSF-DS1: Conduct an Initial Assessment of Employee Security Awareness | Assessment Needs | 22 (12%) | 18 (90%) | 2 |
| CSF-DS2: Know Your Audiences to Ensure Content Suitability | Target Audiences | 21 (11%) | 18 (90%) | 3 | |
| CSF-DS3: Make a Yearly Plan to Align Goals and Objectives | Goal/Objective | 16 (9%) | 16 (80%) | 5 | |
| CSF-DS4: Design for Cultural Context and Employee Cultural Diversity | Culture | 14 (7%) | 14 (70%) | 6 | |
| CSF-DS5: Adhere to Organizational Security Policy and the “Law of the Land” | Policy | 11 (6%) | 11 (55%) | 9 | |
| CSF-DS6: Build Security Awareness Campaigns | Communication | 11 (6%) | 9 (45%) | 11 | |
| Development | CSF-DV1: Sustained Communication of Relevant Messages | Communication | 14 (7%) | 12 (60%) | 8 |
| Implementation | CSF-IM1: Apply Diverse Methods to Deliver Security Awareness Messages | Communication Channel | 28 (15%) | 17 (85%) | 4 |
| CSF-IM2: Motivate Employees to Engage in Security Awareness | Motivation | 11 (6%) | 11 (55%) | 10 | |
| Evaluation | CSF-EV1: Maintain Quarterly Evaluation of Employee Performance | Periodic Assessment | 24 (13%) | 20 (100%) | 1 |
| CSF-EV2: Measure Employee Reporting of Security Incidents | Incident Indication | 15 (8%) | 14 (70%) | 7 | |
| Total | 187 (100%) | 20 (100%) | |||
| Lifecycle phase | CSF (ranked order within lifecycle phase) | Category | Coded excerpts | KI frequency | CSF rank |
|---|---|---|---|---|---|
| Design | Assessment Needs | 22 (12%) | 18 (90%) | 2 | |
| Target Audiences | 21 (11%) | 18 (90%) | 3 | ||
| Goal/Objective | 16 (9%) | 16 (80%) | 5 | ||
| Culture | 14 (7%) | 14 (70%) | 6 | ||
| Policy | 11 (6%) | 11 (55%) | 9 | ||
| Communication | 11 (6%) | 9 (45%) | 11 | ||
| Development | Communication | 14 (7%) | 12 (60%) | 8 | |
| Implementation | Communication Channel | 28 (15%) | 17 (85%) | 4 | |
| Motivation | 11 (6%) | 11 (55%) | 10 | ||
| Evaluation | Periodic Assessment | 24 (13%) | 20 (100%) | 1 | |
| Incident Indication | 15 (8%) | 14 (70%) | 7 | ||
| 187 (100%) | 20 (100%) | ||||
Source(s): Authors' own creation/work
Sharing content requires targeting cookies to be enabled. Please update your cookie preferences to use this feature.