An analysis on the dimensions of information security culture concept: A review

The cultivation of positive Information Security Culture (ISC) is an effective way to promote security behavior and practices among employees in the organization. However, there is yet a consensus on a standard set of dimensions for the ISC concept. ISC has been associated with many facets, with som...

Full description

Bibliographic Details
Main Authors: Akhyari, Nasir, Ruzaini, Abdullah Arshah, M. R., Abdul Hamid
Format: Article
Language:English
Published: Elsevier 2019
Subjects:
Online Access:http://umpir.ump.edu.my/id/eprint/24131/
http://umpir.ump.edu.my/id/eprint/24131/
http://umpir.ump.edu.my/id/eprint/24131/
http://umpir.ump.edu.my/id/eprint/24131/7/An%20analysis%20on%20the%20dimensions%20of%20information%20security%20culture%20concept.pdf
id ump-24131
recordtype eprints
spelling ump-241312019-08-22T04:51:02Z http://umpir.ump.edu.my/id/eprint/24131/ An analysis on the dimensions of information security culture concept: A review Akhyari, Nasir Ruzaini, Abdullah Arshah M. R., Abdul Hamid QA75 Electronic computers. Computer science The cultivation of positive Information Security Culture (ISC) is an effective way to promote security behavior and practices among employees in the organization. However, there is yet a consensus on a standard set of dimensions for the ISC concept. ISC has been associated with many facets, with some overlapping dimensions found in the literature. There is little explanation, if any, as to why this happens or to what extent do variances of dimensions affects ISC concept and findings. This paper presents an analysis of the different dimensions in conceptualizing the ISC. Eight major databases including Web of Science, Scopus and Google Scholar were systematically exhausted using PRISMA and a total of 79 studies from 2000 to 2017 was selected for analysis. While different approaches such as adopted theories affect the dimensions of ISC, our analysis also covered other contributing factors such as the objective of the study, type of organization under study and the information security maturity level. In addition, we found no evidence of a set of widely accepted concepts and dimensions for ISC. This review provides substantial evidence on the numerous dimensions used in ISC and could be utilized by academicians as a reference in ISC-related studies. Elsevier 2019 Article PeerReviewed pdf en http://umpir.ump.edu.my/id/eprint/24131/7/An%20analysis%20on%20the%20dimensions%20of%20information%20security%20culture%20concept.pdf Akhyari, Nasir and Ruzaini, Abdullah Arshah and M. R., Abdul Hamid (2019) An analysis on the dimensions of information security culture concept: A review. Elsevier Journal of Information Security and Applications, 44. pp. 12-22. ISSN 2214-2126 https://doi.org/10.1016/j.jisa.2018.11.003 https://doi.org/10.1016/j.jisa.2018.11.003
repository_type Digital Repository
institution_category Local University
institution Universiti Malaysia Pahang
building UMP Institutional Repository
collection Online Access
language English
topic QA75 Electronic computers. Computer science
spellingShingle QA75 Electronic computers. Computer science
Akhyari, Nasir
Ruzaini, Abdullah Arshah
M. R., Abdul Hamid
An analysis on the dimensions of information security culture concept: A review
description The cultivation of positive Information Security Culture (ISC) is an effective way to promote security behavior and practices among employees in the organization. However, there is yet a consensus on a standard set of dimensions for the ISC concept. ISC has been associated with many facets, with some overlapping dimensions found in the literature. There is little explanation, if any, as to why this happens or to what extent do variances of dimensions affects ISC concept and findings. This paper presents an analysis of the different dimensions in conceptualizing the ISC. Eight major databases including Web of Science, Scopus and Google Scholar were systematically exhausted using PRISMA and a total of 79 studies from 2000 to 2017 was selected for analysis. While different approaches such as adopted theories affect the dimensions of ISC, our analysis also covered other contributing factors such as the objective of the study, type of organization under study and the information security maturity level. In addition, we found no evidence of a set of widely accepted concepts and dimensions for ISC. This review provides substantial evidence on the numerous dimensions used in ISC and could be utilized by academicians as a reference in ISC-related studies.
format Article
author Akhyari, Nasir
Ruzaini, Abdullah Arshah
M. R., Abdul Hamid
author_facet Akhyari, Nasir
Ruzaini, Abdullah Arshah
M. R., Abdul Hamid
author_sort Akhyari, Nasir
title An analysis on the dimensions of information security culture concept: A review
title_short An analysis on the dimensions of information security culture concept: A review
title_full An analysis on the dimensions of information security culture concept: A review
title_fullStr An analysis on the dimensions of information security culture concept: A review
title_full_unstemmed An analysis on the dimensions of information security culture concept: A review
title_sort analysis on the dimensions of information security culture concept: a review
publisher Elsevier
publishDate 2019
url http://umpir.ump.edu.my/id/eprint/24131/
http://umpir.ump.edu.my/id/eprint/24131/
http://umpir.ump.edu.my/id/eprint/24131/
http://umpir.ump.edu.my/id/eprint/24131/7/An%20analysis%20on%20the%20dimensions%20of%20information%20security%20culture%20concept.pdf
first_indexed 2023-09-18T22:36:22Z
last_indexed 2023-09-18T22:36:22Z
_version_ 1777416622496022528