Enhancing information security management through organisational learning

点击翻译按钮获取中文摘要

This project aims to help organisations to protect their information resources from complex and evolving information security threats. This is highly significant for organisations; evidence shows that despite financing information security programs, the incidence of information security breaches is still increasing. To address this issue, the project plans to use a security learning process model which will be refined through a series of action research cycles. The model incorporates security lessons and insights learnt from incidents into routine security practices. By institutionalising lessons learnt from security incidents, organisations may be able to apply more effective and adaptive security defences to their evolving security threat environment.