Work

Information security culture guidelines to improve employee’s security behavior: a review of empirical studies

Year: 2018

Type: article

Abstract: This paper reviews Information Security Culture (ISC) studies published in six leading databases from year 2000 until 2016 to investigate empirical findings that could support the relationship between ISC and employee’s security behavior as well as to identify the findingsthat could be applied as guidelines to cultivate ISC in the organization. This reviewdiscovered that there is lack of comprehensive empirical studies have been done to provide sufficient empirical findings in supporting the relationship between ISC and security behavior. The approaches of the studies in terms of conceptualization and operationalization of ISC concept also limit the applicability of the findings to be used as the guidelines for ISC cultivation. This paper provides clear justifications on these issues and indicated a clear on the future of ISC research to be taken.

Source: UMP Institutional Repository (Universiti Malaysia Pahang)

DOI: 10.4314/jfas.v10i2s.21

Authors: Akhyari Nasir, Ruzaini Abdullah Arshah, Asrar Rashid

Institutions: TATI University College, Universiti Malaysia Pahang Al-Sultan Abdullah

Language: English

Topic: Information and Cyber Security

Subfield: Information Systems

Field: Computer Science

Domain: Physical Sciences

Open Access status: green

Funder: Universiti Malaysia Pahang

Award: G4682724216