Get 20M+ Full-Text Papers For Less Than $1.50/day. Start a 14-Day Trial for You or Your Team.

Learn More →

Organisational culture, procedural countermeasures, and employee security behaviour

Organisational culture, procedural countermeasures, and employee security behaviour PurposeThis paper provides new insights about security behaviour in selected US and Irish organisations by investigating how organisational culture and procedural security countermeasures tend to influence employee security actions. An increasing number of information security breaches in organisations presents a serious threat to the confidentiality of personal and commercially sensitive data. While recent research shows that humans are the weakest link in the security chain and the root cause of a great portion of security breaches, the extant security literature tends to focus on technical issues.Design/methodology/approachThis paper builds on general deterrence theory and prior organisational culture literature. The methodology adapted for this study draws on the analytical grounded theory approach employing a constant comparative method.FindingsThis paper demonstrates that procedural security countermeasures and organisational culture tend to affect security behaviour in organisational settings.Research limitations/implicationsThis paper fills the void in information security research and takes its place among the very few studies that focus on behavioural as opposed to technical issues.Practical implicationsThis paper highlights the important role of procedural security countermeasures, information security awareness and organisational culture in managing illicit behaviour of employees.Originality/valueThis study extends general deterrence theory in a novel way by including information security awareness in the research model and by investigating both negative and positive behaviours. http://www.deepdyve.com/assets/images/DeepDyve-Logo-lg.png Information and Computer Security Emerald Publishing

Organisational culture, procedural countermeasures, and employee security behaviour

Loading next page...
 
/lp/emerald-publishing/organisational-culture-procedural-countermeasures-and-employee-z044f6rLEn

References (65)

Publisher
Emerald Publishing
Copyright
Copyright © Emerald Group Publishing Limited
ISSN
2056-4961
DOI
10.1108/ICS-03-2017-0013
Publisher site
See Article on Publisher Site

Abstract

PurposeThis paper provides new insights about security behaviour in selected US and Irish organisations by investigating how organisational culture and procedural security countermeasures tend to influence employee security actions. An increasing number of information security breaches in organisations presents a serious threat to the confidentiality of personal and commercially sensitive data. While recent research shows that humans are the weakest link in the security chain and the root cause of a great portion of security breaches, the extant security literature tends to focus on technical issues.Design/methodology/approachThis paper builds on general deterrence theory and prior organisational culture literature. The methodology adapted for this study draws on the analytical grounded theory approach employing a constant comparative method.FindingsThis paper demonstrates that procedural security countermeasures and organisational culture tend to affect security behaviour in organisational settings.Research limitations/implicationsThis paper fills the void in information security research and takes its place among the very few studies that focus on behavioural as opposed to technical issues.Practical implicationsThis paper highlights the important role of procedural security countermeasures, information security awareness and organisational culture in managing illicit behaviour of employees.Originality/valueThis study extends general deterrence theory in a novel way by including information security awareness in the research model and by investigating both negative and positive behaviours.

Journal

Information and Computer SecurityEmerald Publishing

Published: Jun 12, 2017

There are no references for this article.