||The Safe and Secure Mobile Employee
||Pettersson, Jacob Munch
||Sharp, Robin (System Security, Department of Informatics and Mathematical Modeling, Technical University of Denmark, DTU, DK-2800 Kgs. Lyngby, Denmark)
||Technical University of Denmark, DTU, DK-2800 Kgs. Lyngby, Denmark
||The mobility of employees is an increasing threat to the security of companies
as mobile devices such as laptops, mobile phones and PDA's are operated in
insecure environments beyond the control of the company but with a constant
demand for connectivity to internal networks and the Internet.
In this thesis, the aim was to analyse this situation in a large, Danish company
from the point of view of providing adequate security to employees whose work
involve a degree of mobility and ensuring a sufficient awareness level of the
issues involved as well as continued commitment to the security effort. A part
of this aim was to determine the eect of using rich media content in the form
of interactive pictures and videos in an awareness initiative to present realistic
scenarios for increased understanding of security information.
The work used a structured methodology for developing a security awareness
program serving as the container for the awareness initiative and involved four
hundred mobile employees. As a prerequisite for establishing the needs of the
program, an extensive security evaluation was conducted which included an
elaborate risk analysis. Both qualitative and quantitative methods were used to
measure the effect of both the techniques and the overall program.
The results of the program revealed that the techniques are a very effective
tool for increasing the understanding of both questions and information related
to security and valuable lessons were learned about how to conduct security
awareness programs and awareness initiatives in a company. The results also
uncovered several critical risks and served as the basis for concrete security
recommendations to the company.
Creation date: 2009-06-16
Update date: 2010-08-25