La gestion des risques informationnels dans l’entreprise privée : perspective des gestionnaires de la sécurité
This master is about the informational risk mitigation within the private sector. More precisely, we have tried to understand, from the experience and the point of view of the security managers, how was the decision making process elaborated with regards to the protection of the informational assets. In order to achieve this, we had to take the elements, which are influencing the decisions taken by the security managers with regards to this subject matter, out of its organizational context and consider two main dimensions: the relational dynamics at play and the issues, constraints, and opportunities likely to influence the decision making.  We wanted to know as well, what were the roles and responsibilities of the security managers with in the decision making process and determine their participation in the security governance model. To expose the level of complexity of this process, we thought it would be appropriate to create a theoretical frame work combining two different approaches: the multidimensional approach and the social transaction approach. If the first one considers that the risk definition needs to be put in a context, the second one admits that the relationship dynamics are not just a simple power game between strategic actors. The analysis of the two approaches has revealed that the informational risk mitigation in the private sector is largely tributary to the personal characteristics of the security managers. More so, the organisational context and the rising numbers of security treats are considerably influencing the decision process, but the experience, the knowledge and the communication skills of the security managers are directly contributing to the success of each phase in the informational risk mitigation process.
security risk management organisation asset protection information risk multidimensional risk approach social transaction perspective