The Weakest Link Human Behaviour and the Corruption of Information Security Management in Organisations - an Analytical Framework
Författare
Summary, in English
In this paper we introduce the norm-injection analysis framework, a construct which can be employed to aid analysis of processes that affect information security management (ISM) in organisations. The underpinnings of this framework draw on and evolve - theories about how apparently mundane organisational processes, particularly managerial demands on employees, may in some instances lead to undesired, perhaps calamitous, consequences. Because the mechanisms between input (demand) and the adverse consequences work by gradually accruing and multiplying Subtle communication "problemettes" into major problems, they are almost undetectable to the untrained eye. Breaches of ISM protocol may appear wholly mysterious to the crash investigators brought in to analyse, post-event, what went wrong. The norm-injection analysis framework is intended to shed light on these below-the-radar processes, and to supplement the tool set an organisation analyst has at his disposal when preparing or evaluating strategic ISM measures.
Publiceringsår
2008
Språk
Engelska
Sidor
94-99
Publikation/Tidskrift/Serie
IMSCI '08: 2nd International Multi-Conference on Society, Cybernetics and Informatics, Vol III, Proceedings
Fulltext
- Available as PDF - 649 kB
- Download statistics
Dokumenttyp
Konferensbidrag
Förlag
International Institute of Informatics and Systemics
Ämne
- Political Science
- Psychology
Conference name
2nd International Multi-Conference on Society, Cybernetics and Informatics
Conference date
2008-06-29 - 2008-07-02
Status
Published