Rodrigo Werlinger ; Kirstie Hawkey ; Konstantin Beznosov

13 June 2007

Abstract: Our qualitative research provides a comprehensive list of challenges to the practice of IT security within organizations, including the interplay between human, organizational, and technical factors. We validate and extend prior work through an integration of these challenges into a framework that organizations can use to identify their limitations with respect to IT security. Furthermore, we suggest research opportunities for the improvement of IT security technologies from a holistic point of view.

Keyword(s): Security challenges ; Organizational security ; Qualitative analysis ; HOT Admin

Published in: R. Werlinger, K. Hawkey, and K. Beznosov. Human, Organizational and Technological Challenges of Implementing IT Security in Organizations. In Proc of. HAISA '08: Human Aspects of Information Security and Assurance, 10 pages), July 2008, pp 35-48.: