Javascript är avstängt eller blockerat i din webbläsare. Detta kan leda till att vissa delar av vår webbplats inte fungerar som de ska. Sätt på javascript för optimal funktionalitet och utseende.

Webbläsaren som du använder stöds inte av denna webbplats. Alla versioner av Internet Explorer stöds inte längre, av oss eller Microsoft (läs mer här: * https://www.microsoft.com/en-us/microsoft-365/windows/end-of-ie-support).

Var god och använd en modern webbläsare för att ta del av denna webbplats, som t.ex. nyaste versioner av Edge, Chrome, Firefox eller Safari osv.

Mikael Sundström

Mikael Sundström

Universitetslektor

Mikael Sundström

The Weakest Link Human Behaviour and the Corruption of Information Security Management in Organisations - an Analytical Framework

Författare

  • Mikael Sundström
  • Robert Holmberg

Summary, in English

In this paper we introduce the norm-injection analysis framework, a construct which can be employed to aid analysis of processes that affect information security management (ISM) in organisations. The underpinnings of this framework draw on and evolve - theories about how apparently mundane organisational processes, particularly managerial demands on employees, may in some instances lead to undesired, perhaps calamitous, consequences. Because the mechanisms between input (demand) and the adverse consequences work by gradually accruing and multiplying Subtle communication "problemettes" into major problems, they are almost undetectable to the untrained eye. Breaches of ISM protocol may appear wholly mysterious to the crash investigators brought in to analyse, post-event, what went wrong. The norm-injection analysis framework is intended to shed light on these below-the-radar processes, and to supplement the tool set an organisation analyst has at his disposal when preparing or evaluating strategic ISM measures.

Avdelning/ar

  • Statsvetenskapliga institutionen
  • Institutionen för psykologi

Publiceringsår

2008

Språk

Engelska

Sidor

94-99

Publikation/Tidskrift/Serie

IMSCI '08: 2nd International Multi-Conference on Society, Cybernetics and Informatics, Vol III, Proceedings

Dokumenttyp

Konferensbidrag

Förlag

International Institute of Informatics and Systemics

Ämne

  • Political Science
  • Psychology

Conference name

2nd International Multi-Conference on Society, Cybernetics and Informatics

Conference date

2008-06-29 - 2008-07-02

Status

Published