What Can We Learn from the Analysis of Information Security Policies? The Case of UK’s Schools - Human Aspects of Information Security and Assurance Access content directly
Conference Papers Year : 2021

What Can We Learn from the Analysis of Information Security Policies? The Case of UK’s Schools

Martin Sparrius
  • Function : Author
  • PersonId : 1239883
Moufida Sadok
  • Function : Author
  • PersonId : 1239884
Peter Bednar
  • Function : Author
  • PersonId : 990510

Abstract

Security standards consider that developing a security policy is a cornerstone in information security management. In practice, the development of a security policy is contextually dependent and there is no agreement on what organisations should include in their security policies. This paper argues that analysing information security policy documents could potentially provide new insights into existing issues with security practices. The paper explores and analyses the content and form of 100 UK schools’ information security policies to assess their scope and accessibility. The key findings show that the content varied widely between schools but tended to have a technical focus, many security policies had not been updated to address changes to work practices due to the Covid-19 situation and many policies have poor readability scores preventing readers from engaging with them.
Fichier principal
Vignette du fichier
509924_1_En_7_Chapter.pdf (322.54 Ko) Télécharger le fichier
Origin : Files produced by the author(s)

Dates and versions

hal-04041062 , version 1 (22-03-2023)

Licence

Attribution

Identifiers

Cite

Martin Sparrius, Moufida Sadok, Peter Bednar. What Can We Learn from the Analysis of Information Security Policies? The Case of UK’s Schools. 15th International Symposium on Human Aspects of Information Security and Assurance (HAISA), Jul 2021, Virtual, United Kingdom. pp.81-90, ⟨10.1007/978-3-030-81111-2_7⟩. ⟨hal-04041062⟩
8 View
4 Download

Altmetric

Share

Gmail Facebook X LinkedIn More