Improving Security Awareness and Security Culture in a Company
Ukonmaanaho, Timo (2019)
Metropolia Ammattikorkeakoulu
2019
All rights reserved
Julkaisun pysyvä osoite on
https://urn.fi/URN:NBN:fi:amk-201902202562
https://urn.fi/URN:NBN:fi:amk-201902202562
Tiivistelmä
The purpose of this project was to improve security awareness in a company. Due to increasing amounts of security attacks and the company’s outdated user awareness program, it was an important project for the company.
A program for security awareness was designed to be an interactive online program. Due to time limitations, Construct 3 was chosen as the development tool. Construct 3 enabled a quick development cycle because of the easy implementation tools and graphical user interface.
The user awareness program was deployed to all company users in the Nordic countries with a one-month deadline. As the program was mandatory, the participation rate was nearly 100%.
Feedback for the program was positive and most users recognized it as a useful experience. The IT department received important information from the user behavior data. In addition to improving user awareness, the IT department can focus on problem areas based on the user data.
A program for security awareness was designed to be an interactive online program. Due to time limitations, Construct 3 was chosen as the development tool. Construct 3 enabled a quick development cycle because of the easy implementation tools and graphical user interface.
The user awareness program was deployed to all company users in the Nordic countries with a one-month deadline. As the program was mandatory, the participation rate was nearly 100%.
Feedback for the program was positive and most users recognized it as a useful experience. The IT department received important information from the user behavior data. In addition to improving user awareness, the IT department can focus on problem areas based on the user data.