Improving the information security culture through monitoring and implementation actions illustrated through a case study

A Da Veiga, N Martins - Computers & Security, 2015 - Elsevier
The human aspect, together with technology and process controls, needs to be considered
as part of an information security programme. Current and former employees are still …

A framework and assessment instrument for information security culture

A Da Veiga, JHP Eloff - Computers & security, 2010 - Elsevier
An organisation's approach to information security should focus on employee behaviour, as
the organisation's success or failure effectively depends on the things that its employees do …

Information security culture-validation of an assessment instrument

A Da Veiga, N Martins, JHP Eloff - Southern African Business Review, 2007 - journals.co.za
Organisations need to ensure that the interaction among people, as well as between people
and information technology (IT) systems, contributes to the protection of information assets …

An approach to information security culture change combining ADKAR and the ISCA questionnaire to aid transition to the desired culture

A Da Veiga - Information & Computer Security, 2018 - emerald.com
Purpose Employee behaviour is a continuous concern owing to the number of information
security incidents resulting from employee behaviour. The purpose of this paper is to …

Defining organisational information security culture—Perspectives from academia and industry

A Da Veiga, LV Astakhova, A Botha, M Herselman - Computers & Security, 2020 - Elsevier
The ideal or strong information security culture can aid in minimising the threat of humans to
information protection and thereby aid in reducing data breaches or incidents in …

Key elements of an information security culture in organisations

F Nel, L Drevin - Information & Computer Security, 2019 - emerald.com
Purpose The purpose of this paper is to report on a study that investigated the information
security culture in organisations in South Africa, with the aim of identifying key aspects of the …

[图书][B] Information security culture

A Martins, J Elofe - 2002 - Springer
In every organisation an information security culture emerges from the way in which people
behave towards information and the security thereof. The procedures that employees use in …

An empirical analysis of the information security culture key factors framework

A Tolah, SM Furnell, M Papadaki - Computers & Security, 2021 - Elsevier
Abstract Information security is a challenge facing organisations, as security breaches pose
a serious threat to sensitive information. Organisations face security risks in relation to their …

Defining and identifying dominant information security cultures and subcultures

A da Veiga, N Martins - Computers & Security, 2017 - Elsevier
When considering an information security culture in an organisation, researchers have to
consider the possibility of several information security subcultures that could be present in …

Exploring the relationship between organizational culture and information security culture

JS Lim, S Chang, S Maynard, A Ahmad - 2009 - ro.ecu.edu.au
Abstract Managing Information Security is becoming more challenging in today's business
because people are both a cause of information security incidents as well as a key part of …