Information Security Awareness Campaign 'Sicher gewinnt!': A Joint Action of the German Federal Administration

摘要

Information security is decided every day in every workplace. The human factor can constitute the weakest link in an information security framework. Improvement of the technical security measures shifts humans more and more into the target of attackers in order to compromise the information assets of an organization. High personal awareness of information security risks and well-trained security managers therefore constitute the first line of information security defence. To achieve this aim, a significant change in user perception and the establishment of an organizational information security awareness culture are necessary. This includes the users' comprehension and application of information security measures in an effortless and intuitional way.This article provides an overview of our experience in conceiving and implementing an effective Awareness Security Campaign for a very heterogeneous and decentralized, large organization, as is the federal administration.