<P> Andersson and Reimers ( 2014 ) found that employees often do not see themselves as part of the organization Information Security `` effort '' and often take actions that ignore organizational Information Security best interests . Research shows Information security culture needs to be improved continuously . In '' Information Security Culture from Analysis to Change '' , authors commented , '' It ′ sa never ending process , a cycle of evaluation and change or maintenance . '' To manage the information security culture , five steps should be taken : Pre-evaluation , strategic planning , operative planning , implementation , and post-evaluation . </P>
five tools of security management to overcome computer crime
Pre-evaluation strategic planning operative planning implementation post-evaluation