Abstract Information security is a critical aspect and plays a significant role in protecting an
organization's business. Organizations are required to safeguard their information and …

In the aftermath of cybersecurity incidents within organizations, explanations of their causes
often revolve around isolated technical or human events such as an Advanced Persistent …

Abstract Information Systems (IS) research on managerial response to cybersecurity
breaches has largely focused on externally oriented actions such as customer redressal and …

The ideal or strong information security culture can aid in minimising the threat of humans to
information protection and thereby aid in reducing data breaches or incidents in …

This paper presents a cyber-security culture framework for assessing and evaluating the
current security readiness of an organization's workforce. Having conducted a thorough …

In this essay, we outline some important concerns in the hope of improving the effectiveness
of security and privacy research. We discuss the need to re-examine our understanding of …

An organisation's approach to information security should focus on employee behaviour, as
the organisation's success or failure effectively depends on the things that its employees do …

Decision-making in the context of organizational information security is highly dependent on
various information. For information security managers, not only relevant information has to …

The continuous information security failures in organizations have led focus toward
organizational culture. It is argued that the development of culture of information security …

This paper presents an empirical investigation on what behavioral information security
governance factors drives the establishment of information security knowledge sharing in …