Reference Hub7
Towards an Organizational Culture Framework for Information Security Practices

Towards an Organizational Culture Framework for Information Security Practices

Joo Soon Lim, Shanton Chang, Atif Ahmad, Sean Maynard
ISBN13: 9781466601970|ISBN10: 1466601973|EISBN13: 9781466601987
DOI: 10.4018/978-1-4666-0197-0.ch017
Cite Chapter Cite Chapter

MLA

Lim, Joo Soon, et al. "Towards an Organizational Culture Framework for Information Security Practices." Strategic and Practical Approaches for Information Security Governance: Technologies and Applied Solutions, edited by Manish Gupta, et al., IGI Global, 2012, pp. 296-315. https://doi.org/10.4018/978-1-4666-0197-0.ch017

APA

Lim, J. S., Chang, S., Ahmad, A., & Maynard, S. (2012). Towards an Organizational Culture Framework for Information Security Practices. In M. Gupta, J. Walp, & R. Sharman (Eds.), Strategic and Practical Approaches for Information Security Governance: Technologies and Applied Solutions (pp. 296-315). IGI Global. https://doi.org/10.4018/978-1-4666-0197-0.ch017

Chicago

Lim, Joo Soon, et al. "Towards an Organizational Culture Framework for Information Security Practices." In Strategic and Practical Approaches for Information Security Governance: Technologies and Applied Solutions, edited by Manish Gupta, John Walp, and Raj Sharman, 296-315. Hershey, PA: IGI Global, 2012. https://doi.org/10.4018/978-1-4666-0197-0.ch017

Export Reference

Mendeley
Favorite

Abstract

In organizations, employee behaviour has a considerable impact on information security. The organizational culture (OC) that shapes acceptable employee behaviours is therefore significant. A large body of literature exists that calls for the cultivation of security culture to positively influence information security related behaviour of employees. However, there is little research examining OC that enables the implementation of information security. The authors address the unsubstantiated claim that there is an important relationship between OC and the ability to successfully implement information security. Findings suggest that security practices can be successfully implemented within eight organizational culture characteristics. Investigation of these organizational culture characteristics from a security perspective is an important step toward future empirical research aimed at understanding the relationship between OC and the implementation of systematic improvement of security practices. The research and practical implications of these findings are discussed, and future research areas are explored.

Request Access

You do not own this content. Please login to recommend this title to your institution's librarian or purchase it from the IGI Global bookstore.