Alaa Tolah
An empirical analysis of the information security culture key factors framework
Tolah, Alaa; Furnell, Steven M.; Papadaki, Maria
Abstract
Information security is a challenge facing organisations, as security breaches pose a serious threat to sensitive information. Organisations face security risks in relation to their information assets, which may also stem from their own employees. Organisations need to focus on employee behaviour to limit security failures, as if they wish to establish effective security culture with employees acting as a natural safeguard for information assets. This study was conducted to respond to a need for more empirical studies that focus on a development of security culture to provide a comprehensive framework. The Information Security Culture and Key Factors Framework has been developed, incorporating two types of factors: those that influence security culture and those that reflect it. This paper validates the applicability of the framework and tests related hypotheses through an empirical study. An exploratory survey was conducted, and 266 valid responses were obtained. Phase two of the study demonstrates the framework levels of validity and reliability through the use of factor analysis. Different hypothetical correlations were analysed through the use of structural equation modelling, with indirect exploratory effect of the moderators achieved through a multi-group analysis. The findings show that the framework has validity and achieved an acceptable fit with the data. This study fills an important gap in the significant relationship between personality traits and security culture. It also contributes to the improvement of information security management through the introduction of a comprehensive framework in practice, which functions in the establishment of security culture. The factors are vital in justifying security culture acceptance, and the framework provides an important tool that can be used to assess and improve an organisational security culture.
Citation
Tolah, A., Furnell, S. M., & Papadaki, M. (2021). An empirical analysis of the information security culture key factors framework. Computers and Security, 108, Article 102354. https://doi.org/10.1016/j.cose.2021.102354
Journal Article Type | Article |
---|---|
Acceptance Date | May 29, 2021 |
Online Publication Date | Jun 5, 2021 |
Publication Date | Sep 1, 2021 |
Deposit Date | Jun 6, 2021 |
Publicly Available Date | Jun 6, 2022 |
Journal | Computers and Security |
Print ISSN | 0167-4048 |
Electronic ISSN | 0167-4048 |
Publisher | Elsevier |
Peer Reviewed | Peer Reviewed |
Volume | 108 |
Article Number | 102354 |
DOI | https://doi.org/10.1016/j.cose.2021.102354 |
Keywords | General Computer Science; Law |
Public URL | https://nottingham-repository.worktribe.com/output/5633864 |
Publisher URL | https://www.sciencedirect.com/science/article/pii/S0167404821001784?via%3Dihub |
Files
Empirical Analysis Of ISCFF- Accepted Manuscript - No Markup
(891 Kb)
PDF
You might also like
AndroDialysis: Analysis of Android Intent Effectiveness in Malware Detection
(2016)
Journal Article
A suspect-oriented intelligent and automated computer forensic analysis
(2016)
Journal Article
Information security policy compliance model in organizations
(2015)
Journal Article
Continuous user authentication using multi-modal biometrics
(2015)
Journal Article
Downloadable Citations
About Repository@Nottingham
Administrator e-mail: discovery-access-systems@nottingham.ac.uk
This application uses the following open-source libraries:
SheetJS Community Edition
Apache License Version 2.0 (http://www.apache.org/licenses/)
PDF.js
Apache License Version 2.0 (http://www.apache.org/licenses/)
Font Awesome
SIL OFL 1.1 (http://scripts.sil.org/OFL)
MIT License (http://opensource.org/licenses/mit-license.html)
CC BY 3.0 ( http://creativecommons.org/licenses/by/3.0/)
Powered by Worktribe © 2024
Advanced Search