Awareness, behaviour and culture: The ABC in cultivating security compliance
Document Type
Conference Proceeding
Publication Title
2015 10th International Conference for Internet Technology and Secured Transactions (ICITST)
Publisher
Institute of Electrical and Electronics Engineers Inc.
School
Security Research Institute
RAS ID
24337
Abstract
A significant volume of security breaches occur as a result of human aspects and it is consequently important for these to be given attention alongside technical aspects. Researchers have argued that security culture stimulates appropriate employees' behavior towards adherence. Therefore, work within organizations should be guided by a culture of security, with the purpose of protecting the organization's assets and affecting individual's behaviors towards better security behavior. Although security aware individuals can play an important role in protecting organizational assets, the way in which individuals behave with security controls that are implemented is crucial in protecting such assets. Should the behavior of individuals not be security compliant, it could have an impact on an organization's productivity and confidentiality of data. In this paper, key literature relating to security culture in the period of 1999-2014 is reviewed. The objective is to examine the role of security awareness, behavior, and how they can play an important role in changing the existing culture to a security culture. Some relevant security culture tools have been introduced. An overall framework to understand how security awareness and behavior can play an important role in changing an existing culture to a security culture has been developed. © 2015 Infonomics Society.
DOI
10.1109/ICITST.2015.7412064
Access Rights
subscription content
Comments
Sherif, Emad (2016). "Awareness, behaviour and culture: The ABC in cultivating security compliance". In 2015 10th International Conference for Internet Technology and Secured Transactions (ICITST) (p. 90-94). Available here