I would like to know how I can create a healthy and positive environment for information security. Due to some mistakes, this is not the case at the moment at the company I am at. I am an intern at the company. I am a 19yr old Dutch Industrial Engineering Management student doing an InfoSec awareness internship in a Bulgarian IT company. My job is to create awareness. I have three more months. Before I came there, there already was a system in place but that system was on a negative/ punishing side. I tried to put it to a next level but it did not work.
Please note: I did not have any previous knowledge of InfoSEc before I started this 'challenge' and I do not understand the specifics of IT related things. Only input-> Black Box -> Output
I have some basic Change management knowledge and some knowledge of Management control (Key performance indicators etc)
I would like to know how I can change the negative approach like looking for failure to a positive like looking for a success without making a complete fool out of myself/ making myself hated.
I am looking for something where people are happy and proud of doing something good, but I don't want to be giving compliments all the time because that gets annoying for people.