With society turning more digitalized, digital crime is reaching higher levels affecting companies and individuals alike. At the same time researchers identify human error and negligence from employees to be the largest reason for companies to being hacked or suffer from cybercrime. At the same time less resources are invested in education within information security compared to expensive firewalls and cyber defenses. The purpose of this thesis is to compare how students at Uppsala University within information systems improve their attitude and behavior towards information security after they have attended at least one course within the subject. This was done by dividing the students into two groups, one (group 1) who had not studied information security and one (group 2) that had. The study used a survey based research method expressed in an online survey. The survey was based on the Knowledge-Attitude- Behavior model which has been used in information security research before with the questionnaire format HAIS-Q. The questionnaire in question was used in this thesis as well, although slightly altered. The result showed that group 2 had better attitude towards information handling as well as a more secure behavior when facing password management. At the same time group 2 achieved a higher mean value in attitude and behavior compared to group 1, although this difference was not statistically significant.