... (Zimaitis et al., 2020), wearable deices (Jeon and Lee, 2022) and contact-tracing apps (Nguyen et al., 2023). Information security Information security culture Privacy concern Subjective norms Nudging Privacy-protection behaviors Organizations consistently wrestle...

... in CSC research. The initial approach started with the use of keywords and search queries (cybersecurity culture) OR (culture of information security) OR (information security culture) to search for related articles in the Web of Science and Google Scholar databases, resulting in the identification...

...Samantha Phillips; Bradley Brummel; Sal Aurigemma; Tyler Moore Purpose Understanding the type of information security culture ( ISC ) present in organizations is important because it guides how employees navigate the use of technology and information resources. This study aims to develop...

..., this paper aims to develop a behavioral training program called Training for Improved Information Security Culture (TIISC). TIISC consisted of information-security training for the employees and managerial behavioral training for the managers. The training program aimed at direct change of behavior as well...

.../licences/by/4.0/legalcode Cybersecurity culture Information security culture Cybersecurity awareness Information security awareness Cybersecurity maturity More recent studies have focused on other areas, or the underlying sample cannot be applied to companies. In 2022, Szczepaniuk conducted...

...Adéle Da Veiga Purpose This study aims to elicit an understanding of creativity and innovation to enable a totally aligned information security culture. A model is proposed to encourage creativity and innovation as part of the information security culture. Design/methodology/approach The study...

...Kiara Jordan Butler; Irwin Brown Purpose The purpose of this preliminary empirical research study is to understand how environmental disruption such as brought on by the COVID-19 pandemic induces shifts in organisational culture, information security culture and subsequently employee information...

... and conclusion of our research findings, their implications for research and practice, research limitations and future research ideas. Some researchers (Martins and Eloff, 2002 ; Da Veiga and Eloff, 2010 ; Solomon and Brown, 2021) argue that, there is a specific information security culture, in other words...

...Nurul Asmui Azmi Md Azmi; Ai Ping Teoh; Ali Vafaei-Zadeh; Haniruzila Hanifah Purpose The purpose of this study is to examine factors, which influence information security culture among employees of telecommunications companies. The motivation for this study was the rise in the number of data...

...Špela Orehek; Gregor Petrič Purpose The concept of information security culture, which recently gained increased attention, aims to comprehensively grasp socio-cultural mechanisms that have an impact on organizational security. Different measurement instruments have been developed to measure...

...Frans Nel; Lynette Drevin Purpose The purpose of this paper is to report on a study that investigated the information security culture in organisations in South Africa, with the aim of identifying key aspects of the culture. The unique aspects for building an information security culture were...

... industries and 38 professions. Findings The results suggest that work-related groups influence individuals’ decision-making in the manner in which contemporary theories of information security culture posit. However, the influence is weak to modest and overshadowed by individual perceptions...

...Adéle Da Veiga Purpose Employee behaviour is a continuous concern owing to the number of information security incidents resulting from employee behaviour. The purpose of this paper is to propose an approach to information security culture change management (ISCCM) that integrates existing change...

... were not recognised as a primary threat but just one of many. Ula et al. (2011) identified the following threats: Information security culture Banking security Information security management system (ISMS) Security governance Socio-technical risks Soft systems methodology (SSM...

...Fredrik Karlsson; Joachim Åström; Martin Karlsson Purpose – The aim of this paper is to survey existing information security culture research to scrutinise the kind of knowledge that has been developed and the way in which this knowledge has been brought about. Design/methodology/approach...