Information systems security and human behaviour

  • Authors:
  • Denis Trcek;Roman Trobec;Nikola Pavesic;J. F. Tasic

  • Affiliations:
  • Department of digital communications and networks, Jozef Stefan Institute, Ljubljana, Slovenia;Department of digital communications and networks, Jozef Stefan Institute, Ljubljana, Slovenia;Faculty of Electrical Engineering, University of Ljubljana, Ljubljana, Slovenia;Faculty of Electrical Engineering, University of Ljubljana, Ljubljana, Slovenia

  • Venue:
  • Behaviour & Information Technology
  • Year:
  • 2007

Quantified Score

Hi-index 0.00

Visualization

Abstract

Until recently, most of the effort for providing security in information systems has been focused on technology. However, it turned out during the last years that human factors have played a central role. Therefore, to ensure appropriate security in contemporary information systems, it is necessary to address not only technology-related issues, but also human behaviour and organisation-related issues that are usually embodied in security policies. This paper presents a template model, which is intended to support risk management for information systems, and which is concentrated on human factors. The model is based on business dynamics that provide the means for qualitative and quantitative treatment of the above-mentioned issues.