Abstract
For senior executives, information security is a basic requirement for business success. Yet, despite being well-motivated, top managers often have only a superficial understanding of information security, which may lead them to make decisions that are not conducive to raising the organization’s security level. Enhancing information security awareness among all employees has been found necessary, but the key to success is raising the awareness level of senior management. Playing a decisive role, they must assume overall responsibility for information security. The question is how to achieve this in an efficient and natural way.
This is a preview of subscription content, log in via an institution to check access.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
Preview
Unable to display preview. Download preview PDF.
References
ISO/IEC 17799:2005: Information Technology – Security Techniques – Code of Practice for Information Security Management, ISO, Geneve (2005)
ISO/IEC 27001:2005: Information Technology – Security Techniques – Information Security Management Systems – Requirements, ISO, Geneve (2005)
Heikkinen, I., Ramet, T.: E-Learning as a Part of Information Security Education Development from Organisational Point of View (in Finnish). Oulu University, Oulu, Finland (2004)
Kajava, J.: Critical Success Factors in Information Security Management in Organizations: The Commitment of Senior Management and the Information Security Awareness Programme. Hallinnon tutkimus – Administrative Studies 22(1) (2003)
Kajava, J., Varonen, R., Tuormaa, E., Nykänen, M.: Information Security Training through eLearning - Small Scale Perspective. In: VIEWDET 2003, pp. 26–28. Vienna, Austria (2003)
Lempinen, H.: Security Model as a Part of the Strategy of a Private Hospital (in Finnish). University of Oulu, Finland (2002)
OECD: OECD Guidelines for the Security of Information Systems and Networks – Towards a Culture of Security. In: OECD Publications, Paris, France, p. 29 (2002)
Author information
Authors and Affiliations
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2007 Springer-Verlag Berlin Heidelberg
About this paper
Cite this paper
Kajava, J., Anttila, J., Varonen, R., Savola, R., Röning, J. (2007). Senior Executives Commitment to Information Security – from Motivation to Responsibility. In: Wang, Y., Cheung, Ym., Liu, H. (eds) Computational Intelligence and Security. CIS 2006. Lecture Notes in Computer Science(), vol 4456. Springer, Berlin, Heidelberg. https://doi.org/10.1007/978-3-540-74377-4_87
Download citation
DOI: https://doi.org/10.1007/978-3-540-74377-4_87
Publisher Name: Springer, Berlin, Heidelberg
Print ISBN: 978-3-540-74376-7
Online ISBN: 978-3-540-74377-4
eBook Packages: Computer ScienceComputer Science (R0)