Critical Analysis of Information Security Culture Definitions - Inria - Institut national de recherche en sciences et technologies du numérique Accéder directement au contenu
Communication Dans Un Congrès Année : 2020

Critical Analysis of Information Security Culture Definitions

Zainab Ruhwanya
  • Fonction : Auteur
  • PersonId : 1133719
Jacques Ophoff
  • Fonction : Auteur
  • PersonId : 1113689

Résumé

This article aims to advance the understanding of information security culture through a critical reflection on the wide-ranging definitions of information security culture in the literature. It uses the hermeneutic approach for conducting literature reviews. The review identifies 16 definitions of information security culture in the literature. Based on the analysis of these definitions, four different views of culture are distinguished. The shared values view highlights the set of cultural value patterns that are shared across the organization. An action-based view highlights the behaviors of individuals in the organization. A mental model view relates to the abstract view of the individual’s thinking on how information security culture must work. Finally, a problem-solving view emphasizes a combination of understanding from shared value-based and action-based views. The paper analyzes and presents the limitations of these four views of information security culture definitions.
Fichier principal
Vignette du fichier
497442_1_En_27_Chapter.pdf (233.79 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-03657709 , version 1 (03-05-2022)

Licence

Paternité

Identifiants

Citer

Zainab Ruhwanya, Jacques Ophoff. Critical Analysis of Information Security Culture Definitions. 14th International Symposium on Human Aspects of Information Security and Assurance (HAISA), Jul 2020, Mytilene, Lesbos, Greece. pp.353-365, ⟨10.1007/978-3-030-57404-8_27⟩. ⟨hal-03657709⟩
10 Consultations
71 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More