Security culture encompasses all socio-cultural measures that support technical security measures, so that information security becomes a natural aspect in the daily activities of every employee. The cultural concept helps to increase trust between the different actors concerning information security within an organization. We start with the explanation of the "organizational culture concept", asking how it can be used to implement information security culture. To create, maintain and change security culture, certain measuring instruments are necessary. We discuss several ways and methods to analyze organizational culture. Furthermore we ask, to what extent they could be used in the context of security culture and what special problems might arise. Finally, the possible implementation is discussed in the context of an ongoing survey from which we present some results.

No abstract

No abstract

No abstract

Caregivers of the residents in nursing homes are exposed to a high degree of physical and mental stress. The purpose of this study was to develop and to test the effects of skill training aimed at reducing occupational stress. The training consisting of 12 sessions of 90 minutes each was designed for nursing assistants and for care supervisors, respectively. Contents of the program are communicating with the demented, coping with job stress and cooperating with colleagues and subordinates, respectively. Eleven homes for the elderly and nursing homes were involved in the pilot study; 88 caregivers participated in the training, 34 of them were supervisors and 54 nursing assistants. The participants mainly appreciated the contents of the training. A controlled study design was applied to evaluate the training effects. 56 participants assessed their competencies, their job conditions and their health status at the beginning, at the end of the training as well as 12 weeks after the intervention had been finished. 56 persons completed the questionnaire receiving no training. Among the training participants, particularly the self-care skills improved. In addition, occupational stress could be reduced and the climate with the residents improved significantly, whereas the frequency of health problems did not change. Compared to the changes also observed in the control group, statistically significant effects were confined to the improvement of the climate with the residents. Care supervisors in general reported a higher benefit from the training than did nursing assistants. The results of the pilot study were used to adapt the training to the caregivers' needs.

Key words:In this paper, we present a management process we have developed for an Information Security Culture. It is based theoretically on action research and practically on expert interviews and group discussions. A Decision Support System, which supports the process, allows quick survey of the existing Information Security Culture in an organization and analysis of the results, thus discovering strong and weak points. This tool recommends, based on stored measures and rules, actions to improve the weak points. It helps security officers to do their work and to improve the Information Security Culture in their organizations. The application of the process and the Decision Support System in a Private Bank is presented here and major findings are discussed.

With the increased use of computers and network systems in a time of digitalization, the digital connectedness frames our daily life at work and at home. To ensure secure systems, all computer users should safely interact with these systems. Prior research indicates insufficient cybersecurity awareness of home computer users who are also difficult to reach as they are not necessarily part of organizational structures. This study therefore investigates organizational, social and personal determinants of an individual's cybersecurity awareness and its influence on cybersecurity behavior in the home environment, using partial least squares structural equation modeling based on survey data. The results show a low influence of the workplace and weak social influences, while the study confirms a significant effect of personal initiative and a strong effect of information systems knowledge on an individual's cybersecurity awareness. The results suggest that security strategies aimed at the general public should focus on improving the knowledge and understanding instead of making fear. The study provides valuable insights about cybersecurity awareness and its determinants contributing to the field of research. The findings can be used for reviewing cybersecurity strategies.

No abstract