Conceptualization and Assessment of Security Culture in Critical Infrastructure (SiKu KRITIS)

This page contains automated translations.

The security culture in organisations is a decisive factor for the protection of critical infrastructure (KRITIS) in Austria, but has so far mainly been researched in connection with accidents. However, intentional threats in particular, such as economic and industrial espionage, corruption, embezzlement, cyber attacks, theft and assaults on employees, are increasing threats to Critical Infrastructure organisations. "Security culture" cannot yet be scientifically recorded and designed. The project "SiKu KRITIS - Security Culture in Critical Infrastructure" is now surveying and analysing this for the first time in three selected Austrian organisations.

Research Areas

Design, Mobility, and Infrastructure

Life Sciences, Health, and Quality of Life

Social Justice, Inclusive and Secure Societies, Governance and Economics

Department

Administration, Economics, Security, Politics

The theoretical focus of the project is on developing a comprehensive, empirically grounded conceptualization of security culture. To this end, the current state of security culture in three selected Austrian critical infrastructure organizations will be assessed and analyzed with regard to intentional threats.

Research Goals

A comprehensive empirically relevant conceptualisation of the term security culture
Development of a mixed-method approach to capture security culture in KRITIS organisations
Survey of the status quo of the security culture of critical infrastructure using the example of three organisations from the healthcare, transport and mobility and energy sectors
Identification of the causes of non-compliance with internal security rules
Derivation of starting points and measures for improving the security culture in the selected organisations
Publications with aggregated results and conclusions for the entire critical infrastructure
Specialist conference on the topics of conceptualisation, survey methods, status quo and measures to improve the security culture in the critical infrastructure in Austria

Methodology

A Comprehensive, Empirically Relevant Conceptualization of Security Culture
Survey and Analysis of the Current State of Security Culture in Three Selected Austrian Critical Infrastructure Organizations with Regard to International Threats