Potential Organizational Behavior Management (OBM) contributions for raising Computer Security awareness and insider threat mitigation

Abstract

Organizational Behavior Management (OBM) is a research field dedicated for developing processes to modify human behavior in organizational environment. It is derived from Behavior Analysis, a methodology for studying human behavior with three characteristics that enables research to be translated into applied technology: Quantification, variables can be quantified and standardized; Repetition, results are predictable in a degree of trustworthiness; and Verification, processes are described with sufficient details allowing its replication. For OBM, an organization applies Value Based Governance when it enables and reinforces employees to change their environment according to organizational values. Also, for OBM, Verbal Governance is the leadership’s capacity to verbally engage and motivate employees to comply with organizational rules and values. The IAEA NSS No. 42-G states that a security culture is an essential aspect of any nuclear security regime and Computer Security should be accounted when promoting security culture in nuclear facilities. In this work we will argue that Value Based Governance would mitigate insider threat, especially from disgruntled employees, and would also raise awareness when Computer Security is an important organizational value for leadership. Finally, we suggest an effective, evidence-based Verbal Governance technique able to promote Computer Security values in nuclear facilities.