In today’s information society and digital world, many companies face problems with information leakages. This study will look into Company X and identify where the company faces problems related to information leakages and how these can be minimized with information and awareness. The study will also look into how a security awareness campaign could look like and how it can be rolled out.

The theory part of this study gives a background to the reader and covers company culture, target group, persuasion models, security awareness, information, communication channels, social media and motivation.

A qualitative method based on interviews was used to collect the data. An interactive approach was applied, meaning new knowledge were created and influenced on the study along the way. The collected data was analyzed using content analysis.

The result showed that the areas where Company X faces problems related to information leakages can be summarized in awareness/information, education/training, policies & directives, technical related and company culture. Some of the problems which came up within these areas were the need for more role models, lack of loyalty and careless attitude, need for limitation of information to external partners, lack of awareness globally and that consequences of unwanted behaviour need to be highlighted.

It is important to plan and follow up on an awareness campaign carefully. The outcome of this study showed that presentations and courses were very useful. Brochures, physical events, posters and e-learning could be used if used in the right way and in combination with other tools. Information on the intranet should be there and provide a source when you need to find information.

Information can be used to work with a lot of the problems identified in this study. Sufficient information and awareness, regular training and education and structured policies and directives will increase employee motivation and together with a cultural change it will increase understanding and knowhow and in the end change behaviour.