Specifying IT Security Awareness
A prototype for assessing information security awareness