Information Security Capacity Building in Community-Based Organizations: Examining the Effects of Knowledge Transfer

摘要

Community-based organizations (CBOs) in the health and human services sector handle very sensitive client information, such as psychiatric, HIV testing, criminal justice, and financial records. With annual revenue often in the range $1 to $10 million, these organizations typically lack the financial, labor, and technical resources to identify and manage information security risks within their environment. Therefore, this paper proposes information security capacity building interventions facilitated by university collaborators as a means to transfer information security knowledge to CBO participants of a service learning course. The paper develops a theoretical model that examines how such an intervention may result in strengthened information security within participating CBOs.