It is crucial to understand the perceptions, attitudes and behaviour of an organisation’s employees in order to shape the information security culture into one in which the confidentiality and sensitivity of information ...