Informationssäkerhetsanalysers verksamhetsnytta : Utvärdering och förbättringsförslag

Sammanfattning: The importance of good information security and safety grows larger and larger for each day in the information society of today. This concerns citizens, companies and public authorities. At the Swedish Transport Administration, the operation of an information security and safety process has evolved over the years to guarantee that the public authority can be trusted by its citizens, cooperating companies and other public authorities. This responsibility has been assigned to the Information Security and Safety Department (Informationssäkerhetsavdelningen, ITsä). In this thesis the aim is to review to what extent ITsä achieves any business benefits for the Swedish Transport Administration, and to analyze, streamline and come up with solutions to improve their workflow. This has been done through literature studies, interviews and participation during the actual workflow of the process. To analyze the process, both Business Process Improvement and Resilience Engineering has been applied. The outcome is that ITsä indeed achieve business benefits for the authority. A number of potential improvements, spreading from easy fixes to bigger reforms, that all will streamline the information security process or increase its value. The papers four main improvement points are: Continue to keep spreading the value of ITsä:s work towards the co-workers at the Swedish Transport Administration. Streamlining and quality improvement of the information analysis process. Reorganisation of the technical security and safety experts. Creating a visual representation and database of the information flows between systems, based on the data that accumulates from the information analyses