出版社：Academy & Industry Research Collaboration Center (AIRCC)
摘要：This paper presents the results of open-ended survey exploring the critical success factors forcybersecurity implementation in government organisations in Bhutan. Successfulimplementation of cybersecurity depends on a thorough understanding of cyber threats andchallenges to the organisational information assets. It also depends on identification of aresponsible, dedicated personnel to lead and direct cybersecurity initiatives. Furthermore, it isimportant to know the critical areas of cybersecurity activities for management to target,prioritise and execute. Understanding of what key things need to be done right by theresponsible agency and its leader, at a particular time and in particular context, can lead tobetter decision making and resource optimisation including skills and knowledge. The surveyfindings indicate that, among other factors, awareness and training, policy and standards, andadequate financing and budgetary commitment to cybersecurity projects are three mostimportant success factors. Channelling an organisation’s limited resources to these few factorsis expected to enhance cybersecurity posture and its management. The research outcome hasimplications to both government and private organizations in Bhutan.
关键词：Cybersecurity; Critical Success Factors; Top Management; Awareness and Training
