<html dir="ltr">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style id="owaParaStyle" type="text/css">P {margin-top:0;margin-bottom:0;}</style>
</head>
<body ocsi="0" fpstyle="1">
<div style="direction: ltr; font-family: Verdana; color: rgb(0, 0, 0); font-size: 13px;">
<div style="">I completed my paper based on the survey I had sent out a few months back. To put it very succinctly, I have long wondered why small businesses do not suffer more security breaches than they do. As a group, they tend to have sloppy operations
practices and poor to nonexistent controls. While they are a smaller and less-tempting target, that alone doesn't seem to explain the lack of problems. One thing that might is the tendency for people at lower risk to compensate for that lower risk by taking
larger personal risks. So I decided to study the variables of psychological control within an information security context. The conclusions were somewhat surprising... but that may be due to the limited sample set.<br>
<div style=""><br>
If you are interested in Likert scales, psychology or academic analysis of information security, the paper is available here: http://www.sans.org/reading_room/whitepapers/awareness/measuring-psychological-variables-control-information-security_33594 .
<br>
<br>
If you like, you can just jump down to pages 26-28 and get my conclusions<br>
<br>
If you don't care about any of that stuff, this site has kittens: http://kittenwar.com/ ;)<br>
<br>
<br>
</div>
</div>
<div><br>
<div style="font-family: Tahoma; font-size: 13px;">
<div style="font-family: Tahoma; font-size: 13px;">
<div style="font-family: Tahoma; font-size: 13px;">
<div style="font-family: Verdana; font-size: 13px;">
<div style="font-size: 13px;">
<div style="font-size: 13px;">
<div style="font-size: 13px;">
<div style="font-size: 13px;"><font size="3"><span style="font-weight: bold;">Josh More</span></font> | Senior Security Consultant - CISSP, GIAC-GSLC Gold, GIAC-GCIH<br>
<span style="font-weight: bold;">Alliance Technologies</span> | <a href="http://www.AllianceTechnologies.net" style="color: rgb(255, 0, 0);">
www.AllianceTechnologies.net</a><br>
400 Locust St., Suite 840 | Des Moines, IA 50309<br>
515.245.7701 | 888.387.5670 x7701<br>
<br>
Blog: Not The Usual Security Predictions: 2011<br>
<a href="http://www.alliancetechnologies.net/blogs/morej" style="color: rgb(255, 0, 0);">http://www.alliancetechnologies.net/blogs/morej</a><br>
<br>
How are we doing? Let us know here:<br>
<a href="http://www.alliancetechnologies.net/forms/alliance-technologies-feedback-survey">http://www.alliancetechnologies.net/forms/alliance-technologies-feedback-survey</a><br>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</body>
</html>