{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,12,30]],"date-time":"2025-12-30T03:30:26Z","timestamp":1767065426953,"version":"3.40.3"},"publisher-location":"Cham","reference-count":43,"publisher":"Springer Nature Switzerland","isbn-type":[{"type":"print","value":"9783031480560"},{"type":"electronic","value":"9783031480577"}],"license":[{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2023]]},"DOI":"10.1007\/978-3-031-48057-7_29","type":"book-chapter","created":{"date-parts":[[2023,11,25]],"date-time":"2023-11-25T06:01:30Z","timestamp":1700892090000},"page":"461-479","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":4,"title":["The Importance of Cybersecurity Awareness Training in the Aviation Industry for Early Detection of Cyberthreats and Vulnerabilities"],"prefix":"10.1007","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-1807-2208","authenticated-orcid":false,"given":"Regner","family":"Sabillon","sequence":"first","affiliation":[]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0197-8663","authenticated-orcid":false,"given":"Juan Ramon","family":"Bermejo Higuera","sequence":"additional","affiliation":[]}],"member":"297","published-online":{"date-parts":[[2023,11,26]]},"reference":[{"issue":"2","key":"29_CR1","doi-asserted-by":"publisher","first-page":"660","DOI":"10.20533\/ijisr.2042.4639.2016.0076","volume":"6","author":"F Alotaibi","year":"2016","unstructured":"Alotaibi, F., Furnell, S., Stengel, I., Papadaki, M.: A review of using gaming technologies for cyber-security awareness. International Journal of Information Security Res. 6(2), 660\u2013666 (2016). https:\/\/doi.org\/10.20533\/ijisr.2042.4639.2016.0076","journal-title":"International Journal of Information Security Res."},{"key":"29_CR2","unstructured":"Axelos: Cyber Resilience Best Practices. Resilia, Norwich (2017)"},{"key":"29_CR3","unstructured":"Beyer, M., et al.: Awareness is Only The First Step: A Framework for Progressive Engagement of Staff in Cyber Security. Hewlett Packard Enterprise (2015)"},{"key":"29_CR4","unstructured":"Beyer, R., Brummel, B.: Implementing Effective Cyber Security Training for End Users of Computer Networks. Society for Human Resource Management and Society for Industrial and Organizational Psychology (2015)"},{"key":"29_CR5","unstructured":"Cano, J.: La educaci\u00f3n en seguridad de la informaci\u00f3n. Reflexi\u00f3n pedag\u00f3gicas desde el pensamiento de sistemas. Memorias 3er Simposio Internacional en \u201cTemas y problemas de Investigaci\u00f3n en Educaci\u00f3n: Complejidad y Escenarios para la Paz\u201d (2016)"},{"key":"29_CR6","unstructured":"Cano, J.: Modelo de madurez de cultura organizacional de seguridad de la informaci\u00f3n. Una visi\u00f3n desde el pensamiento sist\u00e9mico-cibern\u00e9tico. Actas de la XIV Reuni\u00f3n Espa\u00f1ola sobre Criptolog\u00eda y Seguridad de la Informaci\u00f3n, pp. 24\u201329 (2016)"},{"key":"29_CR7","unstructured":"Cyber, X.: 2019 Global ICS & IIoT Risk Report. A Data-Driven Analysis of Vulnerabilities in Our Industrial and Critical Infrastructure. CyberX Labs. (2019)"},{"key":"29_CR8","unstructured":"ESET.: ESET Cybersecurity Awareness Training. ESET Canada. https:\/\/www.eset.com\/ca\/cybertraining\/. Accessed 02 Feb 2023"},{"key":"29_CR9","unstructured":"Fujitsu.: The Digital Transformation PACT. https:\/\/www.fujitsu.com. Accessed 2 Feb 2023"},{"key":"29_CR10","unstructured":"Gartner: Gartner Magic Quadrant for Security Awareness Computer- Based Training Vendors. Gartner, Inc. (2019)"},{"key":"29_CR11","unstructured":"Gartner: How to Build an Enterprise Security Awareness Program. Gartner, Inc. (2018)"},{"key":"29_CR12","unstructured":"Gartner: How to Secure the Human Link. Gartner, Inc. (2018)"},{"key":"29_CR13","unstructured":"Group, N.T.T.: Embedding Cybersecurity into Digital Transformation - A Journey Towards Business Resilience. NTT Security. https:\/\/www.nttsecurity.com. Accessed 2 Feb 2023"},{"key":"29_CR14","volume-title":"People-Centric Security: Transforming your Enterprise Security Culture","author":"L Hayden","year":"2016","unstructured":"Hayden, L.: People-Centric Security: Transforming your Enterprise Security Culture. Mc Graw Hill, New York (2016)"},{"key":"29_CR15","unstructured":"International Organization for Standardization - ISO.: ISO\/IEC 27001:2022 \u2013 Information Technology \u2013 cybersecurity and privacy protection \u2013 Information Security Management Systems \u2013 Requirements. ISO (2022)"},{"key":"29_CR16","unstructured":"International Organization for Standardization -ISO.: ISO\/IEC 27032:2012 \u2013 Information Technology \u2013 Security Techniques \u2013 Guidelines for Cybersecurity. ISO (2012)"},{"key":"29_CR17","doi-asserted-by":"crossref","unstructured":"LeClair, J., Abraham, S., Shih, L.: An interdisciplinary approach to educating an effective cyber security worforce. In: Proceedings of Information Security Curriculum Development Conference, pp. 71\u201378. Academic Press, Kennesaw, GA (2013)","DOI":"10.1145\/2528908.2528923"},{"key":"29_CR18","unstructured":"MediaPro: A Best Practices Guide for Comprehensive Employee Awareness Programs. MediaPro. (2017)"},{"key":"29_CR19","unstructured":"MITRE.: Cybersecurity Awareness & Training. The MITRE Corporation (2017)"},{"key":"29_CR20","unstructured":"Monahan, D.: Security Awareness Training: It\u2019s not just for Compliance- Research Report Summary. Enterprise Management Associates. EMA (2014)"},{"key":"29_CR21","unstructured":"National Institute of Standards and Technology \u2013 NIST.: Building an Information Technology Security Awareness and Training Program. NIST Special Publication 800\u201350 (2003)"},{"key":"29_CR22","unstructured":"National Institute of Standards and Technology \u2013 NIST.: An Introduction to Information Security. NIST Special Publication 800\u201312 Revision 1. (2017)"},{"key":"29_CR23","unstructured":"Nguyen, T.N., Sbityakov, L., Scoggins, S.: Intelligence-based Cybersecurity Awareness Training- an Exploratory Project. CoRR, abs\/1812.04234 (2018)"},{"key":"29_CR24","unstructured":"PCI Security Standards Council - PCI DSS.: Best Practices for Implementing a Security Awareness Program. PCI DSS (2014)"},{"key":"29_CR25","first-page":"1","volume":"5","author":"T Penderdast","year":"2016","unstructured":"Penderdast, T.: How to audit the human element and assess your organization\u2019s security risk. ISACA Journal 5, 1\u20135 (2016)","journal-title":"ISACA Journal"},{"key":"29_CR26","unstructured":"Ponemon Institute.: Assessing the DNS Security Risk. Research report sponsored by Infoblox. Ponemon Institute LLC. (2018)"},{"key":"29_CR27","doi-asserted-by":"publisher","unstructured":"Sabillon, R., Cano, J.: Auditor\u00edas en Ciberseguridad: Un modelo de aplicaci\u00f3n general para empresas y naciones. Edici\u00f3n Especial: Ciberseguridad y Ciberdefensa. Revista Ib\u00e9rica de Sistemas e Tecnologias de Informa\u00e7ao (RISTI). Portugal. 32(06), 33\u201348. https:\/\/doi.org\/10.17013\/risti.32.33-48 (2019)","DOI":"10.17013\/risti.32.33-48"},{"key":"29_CR28","doi-asserted-by":"publisher","unstructured":"Sabillon, R., Serra-Ruiz, J., Cavaller, V., Cano, J.: A comprehensive cybersecurity audit model to improve cybersecurity assurance: the cybersecurity audit model (CSAM). Proceedings of Second International Conference on Information Systems and Computer Science (INCISCOS) (2017). https:\/\/doi.org\/10.1109\/INCISCOS.2017.20","DOI":"10.1109\/INCISCOS.2017.20"},{"key":"29_CR29","doi-asserted-by":"publisher","unstructured":"Sabillon, R., Serra-Ruiz, J., Cavaller, V., Jeimy, J., Cano, M.: An effective cybersecurity training model to support an organizational awareness program: the cybersecurity awareness training model (CATRAM). a case study in Canada. Journal of Cases on Information Technology 21(3), 26\u201339 (2019). https:\/\/doi.org\/10.4018\/JCIT.2019070102","DOI":"10.4018\/JCIT.2019070102"},{"key":"29_CR30","doi-asserted-by":"publisher","unstructured":"Sabillon, R.: A practical model to perform comprehensive cybersecurity audits. Enfoque UTE 9(1), 127137 (2018). https:\/\/doi.org\/10.29019\/enfoqueute.v9n1.214","DOI":"10.29019\/enfoqueute.v9n1.214"},{"key":"29_CR31","doi-asserted-by":"publisher","unstructured":"Sabillon, R.: Audits in Cybersecurity, In I.Management Association (Eds.), Research Anthology on Business Aspects of Cybersecurity, pp. 1\u201318. IGI Global. https:\/\/doi.org\/10.4018\/978-1-6684-3698-1.ch001 (2022)","DOI":"10.4018\/978-1-6684-3698-1.ch001"},{"key":"29_CR32","doi-asserted-by":"publisher","unstructured":"Sabillon, R.: Audits in Cybersecurity. Cyber Security Auditing, Assurance, and Awareness Through CSAM and CATRAM, IGI Global, pp.126\u2013148. https:\/\/doi.org\/10.4018\/978-1-7998-4162-3.ch007 (2021)","DOI":"10.4018\/978-1-7998-4162-3.ch007"},{"key":"29_CR33","doi-asserted-by":"publisher","unstructured":"Sabillon, R.: Cybersecurity Auditing, Assurance and Awareness Through CSAM and CATRAM: Emerging Research and Opportunities. IGI Global (2021). https:\/\/doi.org\/10.4018\/978-4162-3","DOI":"10.4018\/978-4162-3"},{"key":"29_CR34","doi-asserted-by":"publisher","unstructured":"Sabillon, R.: Scenario III: Data for a single cybersecurity domain audit (Awareness Education). Mendeley Data (2018). https:\/\/doi.org\/10.17632\/m4dk8n9sx7.2","DOI":"10.17632\/m4dk8n9sx7.2"},{"key":"29_CR35","doi-asserted-by":"publisher","unstructured":"Sabillon, R.: The cybersecurity audit model (CSAM), In I.Management Association (Eds.), Research Anthology on Business Aspects of Cybersecurity, pp.77\u2013139 (2022). IGI Global. https:\/\/doi.org\/10.4018\/978-1-6684-3698-1.ch005","DOI":"10.4018\/978-1-6684-3698-1.ch005"},{"key":"29_CR36","doi-asserted-by":"publisher","unstructured":"Sabillon, R.: The cybersecurity audit model (CSAM). Cyber Security Auditing, Assurance, and Awareness Through CSAM and CATRAM, IGI Global, pp.149\u2013232 (2021). https:\/\/doi.org\/10.4018\/978-1-7998-4162-3.ch008","DOI":"10.4018\/978-1-7998-4162-3.ch008"},{"key":"29_CR37","doi-asserted-by":"publisher","unstructured":"Sabillon, R.: The cybersecurity awareness training model (CATRAM). Cyber Security Auditing, Assurance, and Awareness Through CSAM and CATRAM, IGI Global, pp.233\u2013257 (2021). https:\/\/doi.org\/10.4018\/978-1-7998-4162-3.ch009","DOI":"10.4018\/978-1-7998-4162-3.ch009"},{"key":"29_CR38","unstructured":"SANS Institute.: 2017 Security Awareness Report: It\u2019s time to communicate."},{"key":"29_CR39","unstructured":"SANS Security Awareness. https:\/\/securingthehuman.sans.org\/media\/resources\/STH-SecurityAwarenessReport-2017.pdf. Accessed 2 Feb 2023"},{"key":"29_CR40","unstructured":"SANS Security Awareness : 2022 Security Awareness Report. SANS Institute (2022)"},{"key":"29_CR41","unstructured":"Ward, M.: Security Awareness and Training: Solving the Unintentional Insider Threat. Cyber Safe Worforce LLC (2016)"},{"key":"29_CR42","volume-title":"Management of Information Security","author":"ME Whitman","year":"2021","unstructured":"Whitman, M.E., Mattord, H.J.: Management of Information Security, 6th edn. Cengage Learning, Inc., Boston, MA (2021)","edition":"6"},{"key":"29_CR43","volume-title":"Case Study Research and Applications","author":"RK Yin","year":"2018","unstructured":"Yin, R.K.: Case Study Research and Applications, 6th edn. Sage Publications, Thousand Oaks, CA (2018)","edition":"6"}],"container-title":["Lecture Notes in Computer Science","HCI International 2023 \u2013 Late Breaking Papers"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-031-48057-7_29","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,11,25]],"date-time":"2023-11-25T06:06:09Z","timestamp":1700892369000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-031-48057-7_29"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023]]},"ISBN":["9783031480560","9783031480577"],"references-count":43,"URL":"https:\/\/doi.org\/10.1007\/978-3-031-48057-7_29","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2023]]},"assertion":[{"value":"26 November 2023","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"HCII","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Human-Computer Interaction","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Copenhagen","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Denmark","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2023","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"23 July 2023","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"28 July 2023","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"25","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"hcii2023","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/2023.hci.international\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Single-blind","order":1,"name":"type","label":"Type","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"CMS","order":2,"name":"conference_management_system","label":"Conference Management System","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"7472","order":3,"name":"number_of_submissions_sent_for_review","label":"Number of Submissions Sent for Review","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"1578","order":4,"name":"number_of_full_papers_accepted","label":"Number of Full Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"396","order":5,"name":"number_of_short_papers_accepted","label":"Number of Short Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"21% - The value is computed by the equation \"Number of Full Papers Accepted \/ Number of Submissions Sent for Review * 100\" and then rounded to a whole number.","order":6,"name":"acceptance_rate_of_full_papers","label":"Acceptance Rate of Full Papers","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"2","order":7,"name":"average_number_of_reviews_per_paper","label":"Average Number of Reviews per Paper","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"2","order":8,"name":"average_number_of_papers_per_reviewer","label":"Average Number of Papers per Reviewer","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"No","order":9,"name":"external_reviewers_involved","label":"External Reviewers Involved","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}}]}}