Information security culture in a value net

The objective of this paper is to increase understanding about the management of information security culture when acting in a global value net. Especially, the paper deals with information, knowledge and time as resources of the leading of information security culture. The paper regards information security culture as a system consisting of interacting framework and content components. Framework contains standardization, certification and measurement of information security. Content includes people attitude, motivation, knowledge and mental models about information security. Communication is a tool that the focal organization of a value net uses to create understanding and put information security in practice.