A Framework for Developing Information Security Awareness Measures

We present a work-in-progress on a framework for developing effective security awareness measures. The framework provides a systematic process to support practitioners, defining the relevant aspects to design an awareness measure for their target audience, and how to determine the security assumptions. Our work merges existing proposals from several disciplines with our practical expertise in developing and evaluating different types of security awareness measures.