Security of information technology (IT) has become a critical issue for organizations as they must protect their information assets from unauthorized access and quickly resume business activities after security breaches. In order for technological solutions to provide effective support to IT security practitioners, tool developers need to understand better not only the technical, but also the human and organizational dimensions of IT security. This talk gives an overview of a multi-year empirically-driven investigation towards understanding and improving IT security management.

Question and answer session to follow.