Organizational Power and Information Security Rule Compliance - Inria - Institut national de recherche en sciences et technologies du numérique Access content directly
Conference Papers Year : 2011

Organizational Power and Information Security Rule Compliance

Ella Kolkowska
  • Function : Author
  • PersonId : 989274
Gurpreet Dhillon
  • Function : Author
  • PersonId : 989216

Abstract

This paper analyzes power relationships and the resulting failure in complying with information security rules. We argue that inability to understand the intricate power relationships in the design and implementation of information security rules leads to a lack of compliance with the intended policy. We conduct the argument through an empirical, qualitative case study set in a Swedish Social Services organization. Our findings suggest a relationship between dimensions of power and information security rules and the impact there might be on compliance behavior. This also helps to improve configuration of security rules through proactive information security management.
Fichier principal
Vignette du fichier
978-3-642-21424-0_15_Chapter.pdf (74.09 Ko) Télécharger le fichier
Origin : Files produced by the author(s)
Loading...

Dates and versions

hal-01567592 , version 1 (24-07-2017)

Licence

Attribution

Identifiers

Cite

Ella Kolkowska, Gurpreet Dhillon. Organizational Power and Information Security Rule Compliance. 26th International Information Security Conference (SEC), Jun 2011, Lucerne, Switzerland. pp.185-196, ⟨10.1007/978-3-642-21424-0_15⟩. ⟨hal-01567592⟩
52 View
376 Download

Altmetric

Share

Gmail Facebook X LinkedIn More