- Title
- MISSTEV : model for information security shared tacit espoused values
- Creator
- Thomson, Kerry-Lynn
- Subject
- Computer security -- Management
- Subject
- Management information systems -- Security measures
- Subject
- Data protection
- Date Issued
- 2007
- Date
- 2007
- Type
- Thesis
- Type
- Doctoral
- Type
- DTech
- Identifier
- vital:9787
- Identifier
- http://hdl.handle.net/10948/717
- Identifier
- Computer security -- Management
- Identifier
- Management information systems -- Security measures
- Identifier
- Data protection
- Description
- One of the most critical assets in most organisations is information. It is often described as the lifeblood of an organisation. For this reason, it is vital that this asset is protected through sound information security practices. However, the incorrect and indifferent behaviour of employees often leads to information assets becoming vulnerable. Incorrect employee behaviour could have an extremely negative impact on the protection of information. An information security solution should be a fundamental component in most organisations. It is, however, possible for an organisation to have the most comprehensive physical and technical information security controls in place, but the operational controls, and associated employee behaviour, have not received much consideration. Therefore, the issue of employee behaviour must be addressed in an organisation to assist in ensuring the protection of information assets. The corporate culture of an organisation is largely responsible for the actions and behaviour of employees. Therefore, to address operational information security controls, the corporate culture of an organisation should be considered. To ensure the integration of information security into the corporate culture of an organisation, the protection of information should become part of the way the employees conduct their everyday tasks – from senior management, right throughout the entire organisation. Therefore, information security should become an integral component of the corporate culture of the organisation. To address the integration of information security into the corporate culture of an organisation, a model was developed which depicted the learning stages and modes of knowledge creation necessary to transform the corporate culture into one that is information security aware.
- Format
- vii, 196 leaves ; 30 cm
- Format
- Publisher
- Nelson Mandela Metropolitan University
- Publisher
- Faculty of Engineering, the Built Environment and Information Technology
- Language
- English
- Rights
- Nelson Mandela Metropolitan University
- Hits: 1770
- Visitors: 1737
- Downloads: 153
Collections
NMMU School of Information and Communication Technology
| Thumbnail | File | Description | Size | Format | |||
|---|---|---|---|---|---|---|---|
| View Details Download | SOURCEPDF | 1 MB | Adobe Acrobat PDF | View Details Download |