Forståelse og forankring af Cybersecurity Awareness
This report investigates the understanding of cybersecurity awareness in the Danish municipalityHjørring Kommune by utilizing Orlikowski and Gash (1994) theory on technological frames. Tofurther understand these technological frames within cybersecurity awareness, the context wherethe frames are formed and reshaped is analyzed as well. This is done from two analytical angles;an exploration of the cybersecurity awareness culture and awareness maturity, which individuallylooks at culture regarding cybersecurity awareness and organisational knowledge as well as theattitude towards cybersecurity awareness. This is done to answer the papers following researchquestion:”What importance does the understanding of cybersecurity awareness have and how does it impacthow cybersecurity awareness is ingrained in an organisation?”This led to a duality of understanding for the workers, as they primarily work on computers, whilenot acknowledging the importance of their involvement in securing or preventing their organisationfrom attackers. However, they acknowledge that they lack maturity when it comes to cybersecurityawareness, as relying on the IT-department is a big part of the organizational culture. Furthermore, the paper reveals significant incongruence between the two identified groups’ frames. Thesedifferences are then further examined by the deeper analysis of culture and maturity within cybersecurity awareness in Hjørring Kommune. Finally, the paper will discuss who is responsible forthe level of cybersecurity awareness, the individuals, the organisation or the legislative body. Thispaper concludes that technological frames supported by a cultural acceptance can be a way of increasing the understanding of cybersecurity awareness of the individual and organisational graspof the concept.
