Achieving a Security Culture

View Sample PDF

Author(s): Adéle Da Veiga (University of South Africa, South Africa)
Copyright: 2022
Pages: 29
Source title: Research Anthology on Business Aspects of Cybersecurity
Source Author(s)/Editor(s): Information Resources Management Association (USA)
DOI: 10.4018/978-1-6684-3698-1.ch011

Keywords: Cyber and Network Security / Information Science Reference / Information Security & Privacy / Security & Forensics

Purchase

View Achieving a Security Culture on the publisher's website for pricing and purchasing information.

Abstract

A security culture can be a competitive advantage when employees uphold strong values for the protection of information and exhibit behavior that is in compliance with policies, thereby introducing minimal incidents and breaches. The security culture in an organization might, though, not be similar among departments, job levels, or even generation groups. It can pose a risk when it is not conducive to the protection of information and when security incidents and breaches occur due to employee error or negligence. This chapter aims to give organizations an overview of the concept of security culture, the factors that could influence it, an approach to assess the security culture, and to prioritize and tailor interventions for high-risk areas. The outcome of the security culture assessment can be used as input to define security awareness, training, and education programs aiding employees to exhibit behavior that is in compliance with security policies.

The IRMA Community

Research IRM

Achieving a Security Culture

Purchase

Abstract

Related Content

IRMA Sponsors