Applying PDCA to Security, Education, Training and Awareness Programs

Casanove, Olivier de; Leleu, Nicolas; Sèdes, Florence

doi:10.1007/978-3-031-12172-2_4

Cited by 3 publications

(2 citation statements)

References 39 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…It tries to increase and maximize the gains of products, processes, or services while minimizing losses. With PDCA, we can reduce the likelihood of failure, prevent making the same mistakes twice, and offer suggestions [13].…”

Section: A Pdca Modelmentioning

confidence: 99%

New Management Standard for Digital Data Protection Using A PDCA Model Anchored to ISO/IEC 27001 and R.A. 10173

Cofino,

Cruz,

Balogo

et al. 2023

IJETAE

View full text Add to dashboard Cite

ICT security has proven to be important in any organization in dealing with digital data. In implementing data protection, there are several challenges that an organization may encounter such as employee’s lack of awareness and education, cybersecurity threats, data breaches, lack of technical infrastructure, and limited resources. To combat internal security threats and encourage employees' security habits every agency, in the different sectors of the government must practice and promote data protection awareness against cybercrimes. To improve the security posture of every public or private organization in the Philippines. This study looked at a newly suggested security management standard that offers a thorough framework for detecting and evaluating risks to ICT (information and communication technology) systems and applications. The proposed standard strongly emphasizes the necessity of ongoing security control monitoring and assessment, frequent recovery plan testing and evaluation, and compliance with the PDCA Model anchored to the ISO/IEC 27001 standard and the Data Privacy Act of 2012. The study examined the suggested standard's main aspects and potential business advantages, including security, compliance, and stakeholder coordination and communication as well as emphasized the difficulties in implementing the suggested standard, including the requirement for significant resources and knowledge. The proposed standard also provides a common language for communication and collaboration among stakeholders, including I.T. staff, business leaders, and external partners. This can help promote a security culture and ensure everyone in the organization works together towards a common goal.

show abstract

Section: A Pdca Modelmentioning

confidence: 99%

New Management Standard for Digital Data Protection Using A PDCA Model Anchored to ISO/IEC 27001 and R.A. 10173

Cofino,

Cruz,

Balogo

et al. 2023

IJETAE

View full text Add to dashboard Cite

show abstract

“…Information security awareness (ISA) is essential in institutions to safeguard confidential information and avoid security breaches. Several studies emphasize the significance of promoting information security education and training to enhance security awareness among students and staff [1][2][3][4][5][6]. A key factor impacting an organization's security is its employees' level of information security awareness.…”

Section: Introductionmentioning

confidence: 99%

Information Security Awareness in Sub-Saharan African Schools: The Role of Educational Leadership in Turbulent Times

N. Kabanda

2024

Leadership Studies in the Turbulent Business Eco-System [Working Title]

View full text Add to dashboard Cite

The COVID-19 pandemic has influenced the increased adoption of digital tools in educational institutions across sub-Saharan Africa. The efficient flow of information within modern organizations heavily depends on using Information and Communication Technology (ICT). Like other organizations, the education sector has experienced a growth in the use of ICT, which has brought about potential threats to information security and users’ safety. In this regard, school leadership can play a pivotal role in ensuring information security by raising users’ awareness. Consequently, protecting school information systems and their users’ safety should be a top priority for school heads and other stakeholders. This paper aims to analyze different strategies school leadership can implement to raise information security awareness (ISA) among staff, teachers, and students and to develop a framework for sub-Saharan African schools considered newcomers in using information and communication technologies. This chapter focuses on the transformational leadership theory, the technology acceptance model (TAM), and the knowledge, attitude, behavior (KAB) model.

show abstract

Development of Measuring System using CSI on ITIL V3 for Improvement at Oil Palm Plantation Company

Andry,

Wijaya,

Thomas

2023

intensif

View full text Add to dashboard Cite

Many information technology services firms now offer services and consider software availability to be a critical component of achieving excellence and competing in the industry. The most crucial factor for customers is the quality of service, consumer needs, the state of the organization/company, and the present market should all be considered when improving their service. In this study, an ITSM analysis will be carried out at an oil palm plantation company based in West Kalimantan Province using ITIL framework V3 by focusing on continual service improvement, which largely relies on service measurement because a process must be measurable to be regulated and improved. To achieve continuous service improvement (CSI) throughout the service life cycle, we use the 7-step process to improve is used to establish and take care of the stages involved in identifying, defining, collecting, processing, analyzing, presenting, and implementing changes. The result of this analysis is CSF and KPI analysis that produce metrics, such as the average resolution time, the percentage of events allocated more than once, and the initial response time, then create a measurement system that is in accordance with the needs and can be used as a reference for the company's system assessment.

show abstract

Applying PDCA to Security, Education, Training and Awareness Programs

Cited by 3 publications

References 39 publications

New Management Standard for Digital Data Protection Using A PDCA Model Anchored to ISO/IEC 27001 and R.A. 10173

New Management Standard for Digital Data Protection Using A PDCA Model Anchored to ISO/IEC 27001 and R.A. 10173

Information Security Awareness in Sub-Saharan African Schools: The Role of Educational Leadership in Turbulent Times

Development of Measuring System using CSI on ITIL V3 for Improvement at Oil Palm Plantation Company

Contact Info

Product

Resources

About