Reinforcing business leaders' role in striving for information security

摘要

Business leaders' role is crucial in striving for information security in all kinds of organizations. Situation in practice, however, is not adequate. There are much guidance and education available but that does not seem to help or even may make situation more confusing. The problem is considered in this paper on the basis of the synthesis of multiple research references through the following questions: What is the state of art in business people commitment to information security? Why is business leaders' commitment to information security crucial? Why is senior executives' commitment to information security in practice not satisfactory? After a comprehensive analysis the paper proposes practical advice to what should be done for enhancing organizations' senior executives' commitment to information security. Key aspect of the proposed management approach is to reinforce integration and awareness of information security within the organizations and then to use innovative methodology for managing information security.