Enhancing Information Security Culture to Reduce Information Security Cost: A Proposed Framework

摘要

As data breaches in mid to large organizations become more frequent and more public, there is a need to focus less on technological solutions to information security management but rather, sociological solutions. This paper identifies cost saving information security initiatives and proposes a framework for organizational and behavioral change in technical human resources, to better address information security concerns.