ABSTRACT

This chapter covers an area that the author consider fundamental to information security practice in general it is not specific to awareness. It highlights areas of concern and concludes with a summary of what the people can do to reduce the negative impact. Language and its relation to information security awareness are of particular importance when considering how the people communicate, and how they are perceived both as a person and as part of a profession. Perception is very powerful, and just as risks are perceived in a way that is seemingly less than logical, perception of information security as a whole can have a significant, unhelpful impact. Information security professionals are perceived as demanding action and money, neither of which are welcome. If addressing an audience with a range of understanding, the people must use terms that are clear and informative without being patronising.