Beta 1


Title The Safe and Secure Mobile Employee
Author Pettersson, Jacob Munch
Supervisor Sharp, Robin (System Security, Department of Informatics and Mathematical Modeling, Technical University of Denmark, DTU, DK-2800 Kgs. Lyngby, Denmark)
Institution Technical University of Denmark, DTU, DK-2800 Kgs. Lyngby, Denmark
Thesis level Master's thesis
Year 2009
Abstract The mobility of employees is an increasing threat to the security of companies as mobile devices such as laptops, mobile phones and PDA's are operated in insecure environments beyond the control of the company but with a constant demand for connectivity to internal networks and the Internet. In this thesis, the aim was to analyse this situation in a large, Danish company from the point of view of providing adequate security to employees whose work involve a degree of mobility and ensuring a sufficient awareness level of the issues involved as well as continued commitment to the security effort. A part of this aim was to determine the eect of using rich media content in the form of interactive pictures and videos in an awareness initiative to present realistic scenarios for increased understanding of security information. The work used a structured methodology for developing a security awareness program serving as the container for the awareness initiative and involved four hundred mobile employees. As a prerequisite for establishing the needs of the program, an extensive security evaluation was conducted which included an elaborate risk analysis. Both qualitative and quantitative methods were used to measure the effect of both the techniques and the overall program. The results of the program revealed that the techniques are a very effective tool for increasing the understanding of both questions and information related to security and valuable lessons were learned about how to conduct security awareness programs and awareness initiatives in a company. The results also uncovered several critical risks and served as the basis for concrete security recommendations to the company.
Series IMM-M.Sc.-2009-33
Fulltext
Original PDF ep09_33_net.pdf (11.75 MB)
Admin Creation date: 2009-06-16    Update date: 2010-08-25    Source: dtu    ID: 244740    Original MXD