Creating, Maintaining and Managing an Information Security Culture.
Alex Fagerström · Theseus (Ammattikorkeakoulujen) · 2013
In the last decade a new threat to information security within an organisation has risen: data loss by personnel mistakes or maliciousness now rank among the top threats to a company's data. By creating a strong information security culture, the management can reduce the risk of data loss. This thesis investigates how to create, maintain and manage an information security culture. Literature analysis, interviews with management members at KPMG, the company for which this thesis was written, and an empirical study are used to better understand the basics and challenges with establishing and managing an information security culture.