Assessment and Management of Information Security Practices and Knowledge Gap: Evidence from GRID Telecommunications Department of Ghana GRID Company Limited

The cardinal aim of this paper is to access and effectively manage the Information Security knowledge gap of employees with access to database resources using Grid Telecommunications database portal as a case study. The method applied a novel approach using semi-structured interviews to collect data from selected employees for analysis. The study emphasized on social engineering attacks as a major means in which sensitive information can be acquired from employees by external entities. The final results showed very promising results as some major knowledge gaps of employees were highlighted and recommendations made to address them. The results can also assist authorities of any organization with similar knowledge gaps to enact and implement policies to close them for the protection of the organization's resources from external access.