It is not my job: exploring the disconnect between corporate security policies and actual security practices in SMEs

INIS

• design 5%
• documentation 5%
• employees 22%
• guidelines 11%
• information 50%
• information systems 5%
• management 5%
• policy 33%
• risk assessment 5%
• security 100%
• values 5%

Computer Science

• Contexts 5%
• Corporate Information 5%
• Corporate Policy 5%
• Corporate Security Policy 11%
• Design 5%
• Gathering Information 5%
• Information Security 27%
• Information Security Policy 5%
• Information System Security 5%
• Interviewed Team 5%
• Maintaining Information 5%
• Potential Issue 5%
• Practical Implication 5%
• Real World 5%
• Related Question 5%
• Risk Assessment 5%
• Security Management 5%
• Security Policy 5%
• Security Practice 33%
• Security Training 5%
• Sensitive Informations 11%
• Small and Medium Enterprise 27%