Information security culture guidelines to improve employee’s security behavior: A review of empirical studies

• Main Authors: Akhyari, N., Ruzaini, Abdullah Arshah, M. R., Abdul Hamid
• Format: Article
• Language: English
• Published: The Society for Advancement of Science & Technology 2018
• Subjects: QA75 Electronic computers. Computer science
• Online Access: http://umpir.ump.edu.my/id/eprint/20740/1/Information%20security%20culture%20guidelines%20to%20improve%20employee-fskkp-2018.pdf; http://umpir.ump.edu.my/id/eprint/20740/; http://www.jfas.info/index.php/jfas/article/view/3764

This paper reviews Information Security Culture (ISC) studies published in six leading databases from year 2000 until 2016 to investigate empirical findings that could support the relationship between ISC and employee’s security behavior as well as to identify the findingsthat could be applied as guidelines to cultivate ISC in the organization. This reviewdiscovered that there is lack of comprehensive empirical studies have been done to provide sufficient empirical findings in supporting the relationship between ISC and security behavior. The approaches of the studies in terms of conceptualization and operationalization of ISC concept also limit the applicability of the findings to be used as the guidelines for ISC cultivation. This paper provides clear justifications on these issues and indicated a clear on the future of ISC research to be taken.