Information security incidents cannot be prevented by technology alone

Over the past year I studied at IISEC, I have realised that it is difficult to stop or eliminate information security incidents with technology alone. Many accidents have been caused by human error and other factors, so it is also important to take action against people. However, deciding "not to take company documents or data home" is meaningless if the rule is broken on an individual basis, for example, "Only today" or "I can't help it because I can't finish my work." My research theme is to explore the factors that cause people to "deviate from the rules."　Why do we break the rules we are supposed to follow? Through my research I would like to find out about factors such as workplace atmosphere and human relations and their influence.

I have grown as a person through discussions with people from diverse fields

One of the attractive points of IISEC is that it brings together working professionals from a variety of backgrounds, including people studying law or working in jobs related to ISMS or security technology. Most of the faculty members are also active in society. Through discussions and other activities that draw on the knowledge and experience of each of us, my horizons have broadened and my ideas have become more flexible. In my work, I started by questioning the norm and assumptions, and I am now able to make more unique comments and suggestions than before.

Thinking of ideas for my dissertation during the travel time across the metropolitan area

Thanks to the warm cooperation of the company and my family, I am able to work and attend this graduate school. It takes nearly two hours to travel from Chiba, where my home is, to Shinagawa, where my workplace is, and to Yokohama, where IISEC is. I use this traveling time to read reference books and to compile ideas for my dissertation.