Information security status in organisations 2008

Abstract

This paper presents the results of the latest survey on information security management and pracitces in organisations. The study is based on a holistic approach to information security that docs not confine itself to technical measures and technology implementations, but encompasses other equally important aspects such as human, social, motiviational and trust. In order to achieve this purpose, a comprehensive intellectual framework of the concepts of information security using Soft Systems Methodology (SSM) was utilised. The survey questions were drived from this conceptual model to ensure their coherence, completeness and relevance to the topic being addressed. The paper concludes with a discussion of the survey results and draws significant insight into the existing status of informaiton assurance in organisations that could be useful for security practitioners, rcscarchcrs and managers. © 2009 Vieweg+Teubner | GWV Fachverlage GmbH, Wiesbaden.