Motivations behind employee information security behavior

Tämän tutkielman tavoitteena oli selvittää mikä motivoi työntekijöitä noudattamaan tai jättämään noudattamatta hyviä tietoturvakäytänteitä. Tavoitteena oli olemassaolevaan kirjallisuuteen pohjustaen, nostaa esiin teemoja liittyen tietoturvakäyttäytymiseen ja löytää selittäviä tekijöitä sekä hyvälle,...

Täydet tiedot

Bibliografiset tiedot
Päätekijä: Räikkönen, Iiro
Muut tekijät: Faculty of Information Technology, Informaatioteknologian tiedekunta, Informaatioteknologia, University of Jyväskylä, Jyväskylän yliopisto
Aineistotyyppi: Pro gradu
Kieli:eng
Julkaistu: 2017
Aiheet:
Linkit: https://jyx.jyu.fi/handle/123456789/55224
_version_ 1828193100507381760
author Räikkönen, Iiro
author2 Faculty of Information Technology Informaatioteknologian tiedekunta Informaatioteknologia University of Jyväskylä Jyväskylän yliopisto
author_facet Räikkönen, Iiro Faculty of Information Technology Informaatioteknologian tiedekunta Informaatioteknologia University of Jyväskylä Jyväskylän yliopisto Räikkönen, Iiro Faculty of Information Technology Informaatioteknologian tiedekunta Informaatioteknologia University of Jyväskylä Jyväskylän yliopisto
author_sort Räikkönen, Iiro
datasource_str_mv jyx
description Tämän tutkielman tavoitteena oli selvittää mikä motivoi työntekijöitä noudattamaan tai jättämään noudattamatta hyviä tietoturvakäytänteitä. Tavoitteena oli olemassaolevaan kirjallisuuteen pohjustaen, nostaa esiin teemoja liittyen tietoturvakäyttäytymiseen ja löytää selittäviä tekijöitä sekä hyvälle, että huonolle käyttäytymiselle. Tutkimuksen empiirinen osuus toteutettiin laadullisena tutkimuksena, jossa hyödynnettiin teemahaastatteluja. Haastattellut toteutettiin yksilöhaastatteluina ja tulosten analysointi tapahtui aineistolähtöistä teemoittelua hyödyntäen. Tutkimuksen tulokset korostavat erityisesti oppimisen, tietoturvatietoisuuden ja työpaikan kulttuurin merkitystä tietoturvakäyttäytymiseen. Jotta työntekijät saataisiin paremmin huomioimaan tietoturva jokapäiväisessä työssään, on erityisen tärkeää, että he ymmärtävät mitä riskejä tietoturvan huomioimatta jättämiseen liittyy ja mtien he omalla toiminnallaan voivat edesauttaa yrityksen tietoturvan parantamisessa. Tärkeää on myös istuttaa tietoturvallinen ajattelu osaksi organisaation kulttuuria, jotta tietoturva olisi jatkuvasti läsnä jokapäiväisessä työssä eikä vain puheenaihe joka nostetaan esille, kun jotain menee pieleen. The objective of this thesis was to find out what motivates employees to comply or fail to comply with good information security practices. Based on earlier liter-ature, the objective was to bring up themes about security behavior, and to find how both good and bad information security can be explained. The empirical part of the research was carried out as a qualitative research utilizing theme in-terviews. Interviews were conducted as individual interviews and the analysis of the results was done by theme based analysis. The results of the study empha-size in particular the importance of learning, awareness and workplace culture. In order to get employees to better consider information security in their day-to-day work, it is especially important that they understand the risks associated with ignoring it and how they themselves can contribute to improving it. It is also important to implement information security way of thinking into the cul-ture of an organization so that it is constantly present in everyday work and not just a topic that is brought up when something goes wrong.
first_indexed 2024-09-11T08:52:15Z
format Pro gradu
free_online_boolean 1
fullrecord [{"key": "dc.contributor.advisor", "value": "Siponen, Mikko", "language": "", "element": "contributor", "qualifier": "advisor", "schema": "dc"}, {"key": "dc.contributor.author", "value": "R\u00e4ikk\u00f6nen, Iiro", "language": null, "element": "contributor", "qualifier": "author", "schema": "dc"}, {"key": "dc.date.accessioned", "value": "2017-08-31T07:46:59Z", "language": "", "element": "date", "qualifier": "accessioned", "schema": "dc"}, {"key": "dc.date.available", "value": "2017-08-31T07:46:59Z", "language": "", "element": "date", "qualifier": "available", "schema": "dc"}, {"key": "dc.date.issued", "value": "2017", "language": null, "element": "date", "qualifier": "issued", "schema": "dc"}, {"key": "dc.identifier.other", "value": "oai:jykdok.linneanet.fi:1720833", "language": null, "element": "identifier", "qualifier": "other", "schema": "dc"}, {"key": "dc.identifier.uri", "value": "https://jyx.jyu.fi/handle/123456789/55224", "language": "", "element": "identifier", "qualifier": "uri", "schema": "dc"}, {"key": "dc.description.abstract", "value": "T\u00e4m\u00e4n tutkielman tavoitteena oli selvitt\u00e4\u00e4 mik\u00e4 motivoi ty\u00f6ntekij\u00f6it\u00e4 noudattamaan tai j\u00e4tt\u00e4m\u00e4\u00e4n noudattamatta hyvi\u00e4 tietoturvak\u00e4yt\u00e4nteit\u00e4. Tavoitteena oli olemassaolevaan kirjallisuuteen pohjustaen, nostaa esiin teemoja liittyen tietoturvak\u00e4ytt\u00e4ytymiseen ja l\u00f6yt\u00e4\u00e4 selitt\u00e4vi\u00e4 tekij\u00f6it\u00e4 sek\u00e4 hyv\u00e4lle, ett\u00e4 huonolle k\u00e4ytt\u00e4ytymiselle. Tutkimuksen empiirinen osuus toteutettiin laadullisena tutkimuksena, jossa hy\u00f6dynnettiin teemahaastatteluja. Haastattellut toteutettiin yksil\u00f6haastatteluina ja tulosten analysointi tapahtui aineistol\u00e4ht\u00f6ist\u00e4 teemoittelua hy\u00f6dynt\u00e4en. Tutkimuksen tulokset korostavat erityisesti oppimisen, tietoturvatietoisuuden ja ty\u00f6paikan kulttuurin merkityst\u00e4 tietoturvak\u00e4ytt\u00e4ytymiseen. Jotta ty\u00f6ntekij\u00e4t saataisiin paremmin huomioimaan tietoturva jokap\u00e4iv\u00e4isess\u00e4 ty\u00f6ss\u00e4\u00e4n, on erityisen t\u00e4rke\u00e4\u00e4, ett\u00e4 he ymm\u00e4rt\u00e4v\u00e4t mit\u00e4 riskej\u00e4 tietoturvan huomioimatta j\u00e4tt\u00e4miseen liittyy ja mtien he omalla toiminnallaan voivat edesauttaa yrityksen tietoturvan parantamisessa. T\u00e4rke\u00e4\u00e4 on my\u00f6s istuttaa tietoturvallinen ajattelu osaksi organisaation kulttuuria, jotta tietoturva olisi jatkuvasti l\u00e4sn\u00e4 jokap\u00e4iv\u00e4isess\u00e4 ty\u00f6ss\u00e4 eik\u00e4 vain puheenaihe joka nostetaan esille, kun jotain menee pieleen.", "language": "fi", "element": "description", "qualifier": "abstract", "schema": "dc"}, {"key": "dc.description.abstract", "value": "The objective of this thesis was to find out what motivates employees to comply or fail to comply with good information security practices. Based on earlier liter-ature, the objective was to bring up themes about security behavior, and to find how both good and bad information security can be explained. The empirical part of the research was carried out as a qualitative research utilizing theme in-terviews. Interviews were conducted as individual interviews and the analysis of the results was done by theme based analysis. The results of the study empha-size in particular the importance of learning, awareness and workplace culture. In order to get employees to better consider information security in their day-to-day work, it is especially important that they understand the risks associated with ignoring it and how they themselves can contribute to improving it. It is also important to implement information security way of thinking into the cul-ture of an organization so that it is constantly present in everyday work and not just a topic that is brought up when something goes wrong.", "language": "en", "element": "description", "qualifier": "abstract", "schema": "dc"}, {"key": "dc.description.provenance", "value": "Submitted using Plone Publishing form by Iiro R\u00e4ikk\u00f6nen (iiolraik) on 2017-08-31 07:46:59.081104. Form: Pro gradu -lomake (https://kirjasto.jyu.fi/julkaisut/julkaisulomakkeet/pro-gradu-lomake). JyX data: [jyx_publishing-allowed (fi) =True]", "language": "en", "element": "description", "qualifier": "provenance", "schema": "dc"}, {"key": "dc.description.provenance", "value": "Submitted by jyx lomake-julkaisija (jyx-julkaisija.group@korppi.jyu.fi) on 2017-08-31T07:46:59Z\r\nNo. of bitstreams: 2\r\nURN:NBN:fi:jyu-201708313625.pdf: 660187 bytes, checksum: 83f00995babe9f561c5ce61a72d2510a (MD5)\r\nlicense.html: 4819 bytes, checksum: 12799cafff462fc6b0ce57c5e06e0e23 (MD5)", "language": "en", "element": "description", "qualifier": "provenance", "schema": "dc"}, {"key": "dc.description.provenance", "value": "Made available in DSpace on 2017-08-31T07:46:59Z (GMT). No. of bitstreams: 2\r\nURN:NBN:fi:jyu-201708313625.pdf: 660187 bytes, checksum: 83f00995babe9f561c5ce61a72d2510a (MD5)\r\nlicense.html: 4819 bytes, checksum: 12799cafff462fc6b0ce57c5e06e0e23 (MD5)\r\n Previous issue date: 2017", "language": "en", "element": "description", "qualifier": "provenance", "schema": "dc"}, {"key": "dc.format.extent", "value": "1 verkkoaineisto (45 sivua)", "language": null, "element": "format", "qualifier": "extent", "schema": "dc"}, {"key": "dc.format.mimetype", "value": "application/pdf", "language": null, "element": "format", "qualifier": "mimetype", "schema": "dc"}, {"key": "dc.language.iso", "value": "eng", "language": null, "element": "language", "qualifier": "iso", "schema": "dc"}, {"key": "dc.rights", "value": "In Copyright", "language": "en", "element": "rights", "qualifier": null, "schema": "dc"}, {"key": "dc.subject.other", "value": "tietoturvatietoisuus", "language": null, "element": "subject", "qualifier": "other", "schema": "dc"}, {"key": "dc.subject.other", "value": "tietoturvak\u00e4ytt\u00e4ytyminen", "language": null, "element": "subject", "qualifier": "other", "schema": "dc"}, {"key": "dc.title", "value": "Motivations behind employee information security behavior", "language": null, "element": "title", "qualifier": null, "schema": "dc"}, {"key": "dc.type", "value": "master thesis", "language": null, "element": "type", "qualifier": null, "schema": "dc"}, {"key": "dc.identifier.urn", "value": "URN:NBN:fi:jyu-201708313625", "language": null, "element": "identifier", "qualifier": "urn", "schema": "dc"}, {"key": "dc.type.ontasot", "value": "Master\u2019s thesis", "language": "en", "element": "type", "qualifier": "ontasot", "schema": "dc"}, {"key": "dc.type.ontasot", "value": "Pro gradu -tutkielma", "language": "fi", "element": "type", "qualifier": "ontasot", "schema": "dc"}, {"key": "dc.contributor.faculty", "value": "Faculty of Information Technology", "language": "en", "element": "contributor", "qualifier": "faculty", "schema": "dc"}, {"key": "dc.contributor.faculty", "value": "Informaatioteknologian tiedekunta", "language": "fi", "element": "contributor", "qualifier": "faculty", "schema": "dc"}, {"key": "dc.contributor.department", "value": "Informaatioteknologia", "language": "fi", "element": "contributor", "qualifier": "department", "schema": "dc"}, {"key": "dc.contributor.organization", "value": "University of Jyv\u00e4skyl\u00e4", "language": "en", "element": "contributor", "qualifier": "organization", "schema": "dc"}, {"key": "dc.contributor.organization", "value": "Jyv\u00e4skyl\u00e4n yliopisto", "language": "fi", "element": "contributor", "qualifier": "organization", "schema": "dc"}, {"key": "dc.subject.discipline", "value": "Information Systems Science", "language": "en", "element": "subject", "qualifier": "discipline", "schema": "dc"}, {"key": "dc.subject.discipline", "value": "Tietoj\u00e4rjestelm\u00e4tiede", "language": "fi", "element": "subject", "qualifier": "discipline", "schema": "dc"}, {"key": "dc.subject.method", "value": "Kvalitatiivinen tutkimus", "language": null, "element": "subject", "qualifier": "method", "schema": "dc"}, {"key": "dc.date.updated", "value": "2017-08-31T07:46:59Z", "language": "", "element": "date", "qualifier": "updated", "schema": "dc"}, {"key": "yvv.contractresearch.funding", "value": "0", "language": "", "element": "contractresearch", "qualifier": "funding", "schema": "yvv"}, {"key": "dc.type.coar", "value": "http://purl.org/coar/resource_type/c_bdcc", "language": null, "element": "type", "qualifier": "coar", "schema": "dc"}, {"key": "dc.rights.accesslevel", "value": "openAccess", "language": "fi", "element": "rights", "qualifier": "accesslevel", "schema": "dc"}, {"key": "dc.type.publication", "value": "masterThesis", "language": null, "element": "type", "qualifier": "publication", "schema": "dc"}, {"key": "dc.subject.oppiainekoodi", "value": "601", "language": null, "element": "subject", "qualifier": "oppiainekoodi", "schema": "dc"}, {"key": "dc.subject.yso", "value": "tietoturva", "language": null, "element": "subject", "qualifier": "yso", "schema": "dc"}, {"key": "dc.subject.yso", "value": "riskit", "language": null, "element": "subject", "qualifier": "yso", "schema": "dc"}, {"key": "dc.subject.yso", "value": "tiedostaminen", "language": null, "element": "subject", "qualifier": "yso", "schema": "dc"}, {"key": "dc.subject.yso", "value": "henkil\u00f6st\u00f6", "language": null, "element": "subject", "qualifier": "yso", "schema": "dc"}, {"key": "dc.subject.yso", "value": "ty\u00f6ntekij\u00e4t", "language": null, "element": "subject", "qualifier": "yso", "schema": "dc"}, {"key": "dc.subject.yso", "value": "k\u00e4ytt\u00e4ytyminen", "language": null, "element": "subject", "qualifier": "yso", "schema": "dc"}, {"key": "dc.subject.yso", "value": "asenteet", "language": null, "element": "subject", "qualifier": "yso", "schema": "dc"}, {"key": "dc.subject.yso", "value": "motivaatio", "language": null, "element": "subject", "qualifier": "yso", "schema": "dc"}, {"key": "dc.subject.yso", "value": "organisaatiokulttuuri", "language": null, "element": "subject", "qualifier": "yso", "schema": "dc"}, {"key": "dc.format.content", "value": "fulltext", "language": null, "element": "format", "qualifier": "content", "schema": "dc"}, {"key": "dc.rights.url", "value": "https://rightsstatements.org/page/InC/1.0/", "language": null, "element": "rights", "qualifier": "url", "schema": "dc"}, {"key": "dc.type.okm", "value": "G2", "language": null, "element": "type", "qualifier": "okm", "schema": "dc"}]
id jyx.123456789_55224
language eng
last_indexed 2025-03-31T20:03:26Z
main_date 2017-01-01T00:00:00Z
main_date_str 2017
online_boolean 1
online_urls_str_mv {"url":"https:\/\/jyx.jyu.fi\/bitstreams\/bd317ae1-fc38-453f-934e-2dd9d1b12221\/download","text":"URN:NBN:fi:jyu-201708313625.pdf","source":"jyx","mediaType":"application\/pdf"}
publishDate 2017
record_format qdc
source_str_mv jyx
spellingShingle Räikkönen, Iiro Motivations behind employee information security behavior tietoturvatietoisuus tietoturvakäyttäytyminen Information Systems Science Tietojärjestelmätiede Kvalitatiivinen tutkimus 601 tietoturva riskit tiedostaminen henkilöstö työntekijät käyttäytyminen asenteet motivaatio organisaatiokulttuuri
title Motivations behind employee information security behavior
title_full Motivations behind employee information security behavior
title_fullStr Motivations behind employee information security behavior Motivations behind employee information security behavior
title_full_unstemmed Motivations behind employee information security behavior Motivations behind employee information security behavior
title_short Motivations behind employee information security behavior
title_sort motivations behind employee information security behavior
title_txtP Motivations behind employee information security behavior
topic tietoturvatietoisuus tietoturvakäyttäytyminen Information Systems Science Tietojärjestelmätiede Kvalitatiivinen tutkimus 601 tietoturva riskit tiedostaminen henkilöstö työntekijät käyttäytyminen asenteet motivaatio organisaatiokulttuuri
topic_facet 601 Information Systems Science Kvalitatiivinen tutkimus Tietojärjestelmätiede asenteet henkilöstö käyttäytyminen motivaatio organisaatiokulttuuri riskit tiedostaminen tietoturva tietoturvakäyttäytyminen tietoturvatietoisuus työntekijät
url https://jyx.jyu.fi/handle/123456789/55224 http://www.urn.fi/URN:NBN:fi:jyu-201708313625
work_keys_str_mv AT räikköneniiro motivationsbehindemployeeinformationsecuritybehavior