Information security culture the socio-cultural dimension in information security management

IFIP Advances in Information and Communication Technology

Volumn 86, Issue , 2002, Pages 191-201

  Schlienger, Thomas ^a   Teufel, Stephanie ^a  

^a Iimt international institute of management in telecommunications University of Fribourg   (Germany)

Author keywords

Awareness; Human Dimension; Information Security Management; Security Culture

Indexed keywords

INDUSTRIAL MANAGEMENT;

CORPORATE CULTURE; CULTURAL THEORY; HUMAN DIMENSIONS; INFORMATION SECURITY CULTURES; INFORMATION SECURITY MANAGEMENTS; PARADIGM SHIFTS; SOCIO-CULTURAL;

SECURITY OF DATA;

EID: 78650874414     PISSN: 18684238     EISSN: 1868422X     Source Type: Book Series    
DOI: 10.1007/978-0-387-35586-3_15     Document Type: Conference Paper

References (17)

1. Adams A. and Sasse M. A., “Users are not the enemy,” Communications of the ACM, vol. 42 (12), pp 41-46, 1999.
2. Attack Registry & Intelligence Service (ARIS), “ARIS Analyzer,” SecurityFocus, 2001, http://aris.securityfocus.com, accessed on 23.10.2001.
3. Baier A., “Trust and antitrust” Ethics, 1986.
4. Brandao R., “IT -Sicherheitskultur im Unternehmen” diploma thesis IFf. Ziirich: Universitiit Zurich, 1994, pp 110.
5. Chircu A. M., Davis G. B., and Kauffman R. J., “Trust, Expertise and E-Commerce Intermediary Adoption,” presented at The 2000 Americas Conference on Information Systems, Long Beach, CA (USA), 2000.
6. Computer Security Institute, “2001 CSJlFBI Computer Crime and Security Survey,” Computer Security Issue & Trends, vol. 7 (1), pp 1-20, 2001.
7. Freitag M., “Sicherheitskultur (Safety Culture)-ein brauchbares Konzept fUr Systemsicherheit und Arbeitssicherheit?,” in Psychologie der Arbeitssicherheit, Burkhardt F. and Winklmeier C., Eds. Heidelberg: Roland Asanger Verlag, 1994.
8. Furnell S. M., Dowland P. S., lllingworth H. M., and Reynolds P. L., “Authentication and Supervision: A Survey of User Attitudes,” Computers & Security, vol. 19 (6), pp 529-539,2000.
9. Gerbich S., “IT-Security 2001: Sind sie (noch ganz) dicht?,” Informationweek (18), 2001. International Nuclear Safety Advisory Group, “Summary Report on the Post-Accident Review Meeting on the Chernobyl accident” Safety Series, vol. 75-INSAG-l, 1986.
10. Laboratory for Computer Science (LCS), “MIT Project Oxygen,” MIT, Laboratory for Computer Science, 2001, http://www.oxygen.lcs.mit.edu, accessed on 23.10.2001.
11. Riihli E., “Unternehmungskultur-Konzepte und Methoden” in Kulturmanagement in schweizerischen Untemehmungen, Riihli E. and Keller A., Eds. Bern I Stuttgart: Verlag Paul Haupt, pp 9-48, 1991.
12. Schein E. H., Organizational Culture and Leadership: A Dynamic View. San Francisco: Jossey-Bass, 1985.
13. Schreyogg G., Organisation: Grundlagen modemer Organisationsgestaltung. Wiesbaden: Gabler Verlag, 1999.
14. Scott J. E. and Gable G., “Goal congruence, trust, and organizational culture: Strengthening knowledge links,” presented at The eighteenth international conference on Information systems, 1997.
15. UJich E., Arbeitspsychologie. Zurich: Vdf, Hochschulverlag an der ETH Zurich, 2001.
16. von Solms B., “Information Security-The Third Wave,” Computers & Security, vol. 19 (7), pp 615-620, 2000.
17. Zumbach F. and Bilhuber E., “HRM im Spannungsfeld zwischen Mensch, Technik und Organisation,” in Excellence durch Personal- und Organisationskompetenz, Thorn N. and Zaugg R. J., Eds. Bern: Paul Haupt Verlag, 2001.