Institutional Repository

Information Security Culture and Information Protection Culture: A Validated Assessment Instrument.

Show simple item record

dc.contributor.author Martins, Nico
dc.contributor.author Da Veiga, Adele
dc.date.accessioned 2016-11-07T12:28:32Z
dc.date.available 2016-11-07T12:28:32Z
dc.date.issued 2015
dc.identifier.citation Da Veiga, A. & Martins, N.(2015). Information Security Culture and Information Protection Culture: A validated assessment instrument. Computer Law & Security Review, 3(12),243-256. en
dc.identifier.issn 0267-3649
dc.identifier.uri http://hdl.handle.net/10500/21766
dc.description.abstract A strong information protection culture is required in organisations where the confidentiality, sensitivity and privacy of information are understood and handled accordingly. This is necessary to reduce the risk of human behaviour to the protection of information as well as to uphold privacy requirements from a regulatory perspective. This research explores the concept of an information security culture and how information privacy can be incorporated to define an information protection culture. Next, the researchers explain information attributes relating to information security and information privacy to derive information attributes that can be considered when referring to an information protection culture. The information attributes are used to evaluate an existing information security culture assessment instrument that can potentially be used to assess an information protection culture. The research reveals that the information security culture assessment (ISCA) instrument can be used, but that it can be further improved by incorporating additional privacy concepts. An information protection culture assessment (IPCA) is conducted as part of a case study in an organisation. This allowed for a factor and reliability analysis to validate the IPCA. The analysis indicated that the IPCA is valid and reliable when grouping the items into the newly identified factors, but can further be enhanced by aligning it to information privacy attributes. en
dc.language.iso en en
dc.publisher Elsevier en
dc.subject Information Security en
dc.subject Information Security Culture en
dc.subject Information Protection Culture en
dc.subject Privacy en
dc.subject Personal Information en
dc.subject Assessment en
dc.subject Behaviour en
dc.subject Human en
dc.subject Questionnaire en
dc.title Information Security Culture and Information Protection Culture: A Validated Assessment Instrument. en
dc.type Article en
dc.description.department Industrial and Organisational Psychology en


Files in this item

This item appears in the following Collection(s)

Show simple item record

Search UnisaIR


Browse

My Account

Statistics