Implementing secure business processes is crucial for companies today, especially in the realm of IT-security. Despite technical solutions, security threats still arise due to human interactions in information systems. To address this, management education plays a key role in raising employee security awareness. A model based on IT-security management and behavioral science has been developed to control security awareness through education. A case study applying this model showed positive results, highlighting the importance of integrating security education into management practices.