More than the individual: Examining the relationship between culture and Information Security Awareness. Issue 88 (January 2020)

• Record Type: Journal Article
• Authors: Wiley, Ashleigh; McCormac, Agata; Calic, Dragana
• Is Part Of: Computers & security. Issue 88(2020)
• Publication Date: 2020-01
• Subjects: Security culture -- Organisational culture -- Information Security Awareness (ISA) -- Information Security (InfoSec) -- Cyber security -- Organisational behaviour; Computer security -- Periodicals; Electronic data processing departments -- Security measures -- Periodicals; 005.805
• DOI: 10.1016/j.cose.2019.101640
• Languages: English
• ISSNs: 0167-4048

Abstract

Abstract: The relationship between security culture and Information Security Awareness (ISA) has received preliminary support; however, its interplay with organisational culture is yet to be empirically investigated. Therefore, this study explored the relationship between ISA, organisational culture, and security culture. A total of 508 working Australians completed an online questionnaire. ISA was measured using the Human Aspects of Information Security Questionnaire (HAIS-Q); organisational culture was measured using the Denison Organisational Culture Survey (DOCS); and security culture was assessed through the Organisational Security Culture Measure. Our results showed that while organisational culture and security culture were correlated with ISA, security culture played an important mediating relationship between organisational culture and ISA. This suggests that organisations should focus on security culture rather than organisational culture to improve ISA, saving time and resources. Future research could further extend current findings by also considering national culture.