Einar Fritzvold, master student of Faculty of Science & Technology at the University of Stavanger presented his master thesis regarding the Cyber Security in Organizations under the guidance of Professor Jayantha Prasanna Liyanage and Martin Guy Williams from EY.
This research work is based on three organizations from different Norwegian industries including Railway, Health Care, and Power Distribution.
The results shows that there are many similarities in the industry solutions, and that there are challenges related to innovation vs security, security assurance and control of ICT service providers, location of ICT service providers, how change in technology also means organizational change, and that there are ambiguities in the legislations which does not ensure quality in cyber security activities. The organizations’ strengths are emergency response. The general improvement areas of the three organizations are ensuring that the organization has an updated threat picture and understands how internal factors affects the cyber risk exposure, and the development of measurable security requirements and targets. Additionally, individual improvement areas have been described for each organization.
For a full copy of the paper, email email@example.com