The role of organizational and social factors for information security in a nuclear power industry. Issue 1 (26th November 2021)

• Record Type: Journal Article
• Authors: Gyllensten, Kristina; Torner, Marianne
• Is Part Of: Organizational cybersecurity journal. Volume 2:Issue 1(2022)
• Page Start: 3
• Page End: 20
• Publication Date: 2021-11-26
• Subjects: Organizational culture -- Information security -- Safety culture -- Safety behaviour -- Security behaviour; 658.478
• DOI: 10.1108/OCJ-04-2021-0012
• Languages: English
• ISSNs: 2635-0270

Abstract

Abstract : Purpose: The aim of this study was to explore the organizational and social prerequisites for employees' participative and rule-compliant information security behaviour in Swedish nuclear power production and its related industry. These industries are high-risk activities that must be meticulously secured. Protecting the information security in the related organizations is an essential aspect of this. Design/methodology/approach: Individual in-depth interviews were conducted with 24 employees in two organizations within the nuclear power industry in Sweden. Findings: We found that prerequisites for employees' participative and rule-compliant information security behaviour could be categorized into structural, social and individual aspects. Structural aspects included well-adapted rules, knowledge support and resources. Social aspects included a supportive organizational culture, collaboration and adequate resources, and individual aspects included individual responsibility. Originality/value: The qualitative approach of the study provided comprehensive descriptions of the identified preconditions. The results may thus enable organizations to better promote conditions important for information security in a high-risk industry.