TOOL SUPPORTED MANAGEMENT OF INFORMATION SECURITY CULTURE Application in a Private Bank

The International Institute of Management in Technology (iimt) specialises in innovation and security research & applications. The venture of iimt is to build research partnerships and to provide paid consultancy services for industrial partners. iimt also provides advanced courses in the management of ICT and utility technology, leading to executive diploma and master degrees.

The following example illustrates the consultancy services provided by iimt:

The iimt research team developed a management process for an Information Security Culture. This management process is based on action research and on expert interviews and group discussions. A Decision Support System, which supports the process, allows quick survey of the existing Information Security Culture in an organization and analysis of the results, thus discovering strong and weak points. This tool recommends, based on stored measures and rules, actions to improve the weak points. It helps security officers to do their work and to improve the Information Security Culture in their organizations. The process and the Decision Support System were applied in a Private Bank. Major findings from this Private Bank application are presented.