For What Technology Can't Fix: Building a Model of Organizational Cybersecurity Culture
For What Technology Can't Fix: Building a Model of Organizational Cybersecurity Culture
复制标题
对于技术无法解决的问题：构建组织网络安全文化模型
DOI：
--
复制
发表时间：
2019
期刊：
影响因子：
--
通讯作者：
Keri E. Pearlson
中科院分区：
文献类型：
--
作者：
Keman Huang;Keri E. Pearlson
组织网络安全需要的不仅仅是最新的技术。为了确保组织的安全，组织的所有成员必须采取行动来降低风险。领导者有特殊的责任来理解、塑造和协调整个组织的信念、价值观和态度与总体安全目标。管理人员需要实际的解决方案来处理网络安全的人为方面。本文中提出的模型描述了组织网络安全文化，有助于其创建的因素，以及如何测量它。金融服务公司Liberty Mutual的领导者创建了一个“数据保护文化”的案例研究，说明了这些因素，以帮助管理者理解和应用建议，在他们的组织中创建一个更成熟的网络安全文化。
Organizational cybersecurity requires more than just the latest technology. To secure an organization, all members of the organization must act to reduce risk. Leaders have a special responsibility to understand, shape and align the beliefs, values, and attitudes of the entire organization with overall security goals. Managers need practical solutions for dealing with the human side of cybersecurity. The model presented in this paper describes organizational cybersecurity culture, the factors that contribute to its creation, and how it can be measured. A case study of a “culture of data protection” created by leaders at financial services firm Liberty Mutual illustrates these factors to help managers understand and apply recommendations to create a more mature cyber security culture in their organization.