Organizational and Human Aspects of Information Security

Part I Introduction : Social networks and the power to the people The roles of corporate positions: Everyone makes a difference Part II Organisational issues Incidents and crises: There¿s no such thing as an isolated incident Whom you can trust: Applied trust and identity in organizational management Managing organization, culture and politics Part III Changing the organization Designing effective awareness programs Transforming organization, attitudes and behavior Gaining executive board and business buy-in

The student is expected to have insight into: Corporate organizations and policies, and how the security is embedded into organization, processes and corporate documentation framework. Practical awareness and the ability to plan a corporate awareness campaign. Security culture and its meaning for corporations. Security planning in an unfriendly environment. Security strategy, security innovation process and its implementation. an understanding and exercising of presentations in front of management: The student nows, how to argue for and who to sell security. Knowledge The candidate will have a sound knowledge of corporate organizations and policies, and how the security is embedded into organization, processes and corporate documentation framework. The candidate possesses thorough knowledge of practical awareness and the ability to plan a corporate awareness campaign The candidate knows about security culture and means to measure and change the culture. The candidate will have a sound knowledge of security strategy, security innovation process and its implementation. Skills He will be able to plan the set of required security documentations and to implement enterprise specific security organization and security policies The student will be enabled to describe a target security culture and to make an implementation plan for a turn around. The candidate is capable to plan a corporate awareness campaign. General competence The candidate is capable to distinguish between responsibility and delegation. The student will be enabled to provide security in an unfriendly environment with budget constraints and ¿lack of enthusiasm¿ for security. The candidate is capable to present successfully in front of management: The student knows, how to argue for security and who to sell security. The course will provide the student with the foundation required for implementing security and awareness systems in corporations and for research in this field.

Annet Utfyllende informasjon: Termpaper with presentation at the end of the term, Readings and homework, Textbook, Powerpoint, Video-examples, Business and scientific papers, Computer Based Training, Repetition formsThe course will be made accessible for both campus and remote students. Every student is free to choose the pedagogic arrangement form that is best fitted for her/his own requirement. The lectures in the course will be given on campus and are open for both categories of students. All the lectures will also be available on Internet through the learning management system (ClassFronter).