Tool supported management of information security culture: Application in a private bank

IFIP Advances in Information and Communication Technology

Volumn 181, Issue , 2005, Pages 65-77

  Schlienger, Thomas ^a   Teufel, Stephanie ^a  

^a UNIVERSITY OF FRIBOURG   (Switzerland)

Author keywords

Assessment; Awareness; Decision Support System; Information Security; Information Security Culture

Indexed keywords

ACTION RESEARCH; ASSESSMENT; AWARENESS; GROUP DISCUSSIONS; INFORMATION SECURITY CULTURES; MANAGEMENT PROCESS; SECURITY OFFICERS; WEAK POINTS;

ARTIFICIAL INTELLIGENCE; DECISION SUPPORT SYSTEMS; TOOLS; UBIQUITOUS COMPUTING; MOBILE SECURITY;

SECURITY OF DATA;

EID: 84885070893     PISSN: 18684238     EISSN: None     Source Type: Book Series    
DOI: 10.1007/0-387-25660-1_5     Document Type: Conference Paper

References (14)

1. Argyris, C. and D. A. Schon (1978). Organizational learning. Reading, Mass., Addison-Wesley Pub. Co.
2. Baskerville, R. L. (1999). Investigating Information Systems with Action research, Communications of the Association for Information Systems. Volume 2, Article 19. http://!www.cis.esu.edui-rbaskerv!CATS 2 19, 11.3.2004.
3. Bjorck, F. (2001). Security Scandinavian Style: Interpreting the Practice of Managing Information Security in Organisations. Licentiate Thesis. Department of Comuuter and Systems Sciences. Stockholm, Stockholm University & Royal Institute of Technology.
4. Hattenschwiler, P. and A. Gachet (2003). Skriptum in Decision Support Systems Theory I. University of Fribourg.
5. Krieger, M. (2004). Ein Decision Support System fur das Management der Informationssicherheitskultur. Masterarbeit. Lehrstuhl fur Manaeement der Informations-und Kommunikationstechnoloaie, Universitat Freiburg i. Ue.
6. Martins, A. and J. H. P. Eloff (2002). Information Security Culture. In: M. A. Ghonaimy, M. T. El-Hadidi and H. K. Aslan, Eds. Security in the information society: visions and perspectives. IFIP TC11 International Conference on Information Security (Sec2002), Cairo, Egypt, Kluwer Academic Publishers: 203-2 14.
7. O'Brien, R. (2001). Um exame da abordagem metodologica da pesquisa aq8o [An Overview of the Methodological Approach of Action Research]. In: R. Richardson, Ed. Teoria e Pratica da Pesquisa Aclor Theorv and Practice of Action Researchl. Jo8o Pessoa, Brazil, Universidade Federal da Paraiba. English version: http://www.web.cal-robrien/uauers/arfinal.ht(m1l 1.3.2004).
8. Robbins, S. P. (2001). Organizational Behavior. New Jersey, Prentice Hall.
9. Ruhli, E. (1991). Unternehmungskultur-Konzepte und Methoden. In: E. Riihli and A. Keller, Eds. Kulturmanagement in schweizerischen Industrieuntemehmunnen. Bern und Stuttgart, Paul Haupt Verlag: 11-49.
10. Schlienger, T. and R. Rues Rizza (2004). Befragung zur Informationssicherheitskultur in CH Organisationen, Arbeitsgruppe "Informationssicherheitskultur" der FGSec (information security society switzerland). www.fnsec.ch/adisklMarktbefrarzn2u9.1 1d.f2,0 04
11. Schlienger, T. and S. Teufel (2002). Information Security Culture-The Socio-Cultural Dimension in Information Security Management. In: M. A. Ghonaimy, M. T. El-Hadidi and H. K. Aslan, Eds. Security in the informations ociety: visions and perspectives. IFIP TC11 International Conference on Information Security (Sec2002), Cairo, Egypt, Kluwer Academic Publishers: 191-201.
12. Schlienger, T. and S. Teufel (2003). Analyzing Information Security Culture: Increasing Trust by an Appropriate Information Security Culture. Proceedings of the International Workshop on Trust and Privacy in Digital Business (Trust Bust 03) in conjunction with 14th International Conference on Database and Expert Systems Applications (DEXA 2003), September 1-5 2003, Prague, Czech Republic, IEEE Computer Society.
13. Schreyogg, G. (1 999). Organisation: Grundlagen moderner Organisationsgestaltung. Wiesbaden, Gabler Verlag.
14. Ulich, E. (2001). Arbeitspsychologie. Zurich, vdf, Hochschulverlag an der ETH Zurich. von Solms, R. and B. von Solms (2004). "From policies to culture." Computer's Security 23(2004): 275-279.