Information Security: Impacts of Leadership and Organizational Culture

摘要

FISMA's goal is to bring order and structure to the information security decisions of an organization. The differences in cyber security achievement among the labs are significant. In one lab we found senior management actively involved in information security. That active involvement flowed through the entire organization with immediacy for action. At other labs the more passive approach was clearly visible in the staff along with the expected results. Organizational change and the understanding that information security is part of the way the laboratories do business will take time to foster and incorporate within the culture of the laboratory. Leadership must understand the role of security and use the labs strengths to promote a security culture.