Enhancing information security management through organisational learning

此计划旨在协助机构保护其资讯资源，免受复杂及不断演变的资讯保安威胁。这对组织来说非常重要；有证据表明，尽管为信息安全项目提供资金，但信息安全漏洞的发生率仍在增加。为了解决这个问题，该项目计划使用一个安全学习过程模型，该模型将通过一系列行动研究周期进行改进。该模型将安全经验教训和从事件中获得的见解纳入日常安全实践。通过将从安全事件中吸取的教训制度化，组织可能能够对其不断变化的安全威胁环境应用更有效和适应性的安全防御。

This project aims to help organisations to protect their information resources from complex and evolving information security threats. This is highly significant for organisations; evidence shows that despite financing information security programs, the incidence of information security breaches is still increasing. To address this issue, the project plans to use a security learning process model which will be refined through a series of action research cycles. The model incorporates security lessons and insights learnt from incidents into routine security practices. By institutionalising lessons learnt from security incidents, organisations may be able to apply more effective and adaptive security defences to their evolving security threat environment.