Developing as an information security management professional in a consultancy organization

Abstract

The objective of the thesis was to develop myself as an information security management professional and document the processes and tools used in day-to-day work and within the work projects. To achieve this, the diary form thesis has been utilized for documenting the daily activities in a ten-week period. At the start of each week the contents of the week are speculated and at the end of each week they are analyzed, producing key takeaways with references to related literature. Theoretical framework of the thesis varies greatly due to the changing and unpredictable nature of the tasks each week; however, it mainly revolvesaround information security management and the enterprise resource planning (ERP) system implementation, which was a large development project of a new system ongoing during the diary. This diary thesis has aided the writer in their growth as a profession information security manager, implementer of systems, and a writer of scientific text. Second Nature Security Oy as the commissioner for the thesis has received transparent and reflective information on the daily work tasks of a consultant and will be able to see the impact of a single specialist in development.