Emerald Login
   

Welcome guest



Article Request:
Process-variance models in information security awareness research


Article Information:

Title:

 Process-variance models in information security awareness research

Author(s):

Angeliki Tsohou, Spyros Kokolakis, Maria Karyda, Evangelos Kiountouzis

Journal:

Information Management & Computer Security

Year:

2008 

Volume:

16 

Issue:

3 

Page:

271 - 287


DOI:

10.1108/09685220810893216

Publisher:

Emerald Group Publishing Limited

Document Access:

Please select from the following options:
View HTML | View PDF (104 KB)

Reprints & permissions:

Image: Rightslink Request

Abstract:

Purpose – The purpose of this paper is to study the way information systems (IS) security researchers approach information security awareness and examine whether these approaches are consistent with the organization theory and IS approaches for the study of organizational processes.

Design/methodology/approach – Open coding analysis was performed on selected publications (articles, surveys, standards, and reports). The chosen publications were classified and the classification results are presented, based on a proposed typology.

Findings – The proposed typology allows us to identify different types of research models followed by security researchers and practitioners, and to infer a set of practical implications, for the benefit of those interested in empirically studying information security awareness.

Research limitations/implications – The paper represents a pilot survey, performed in a selected number of publications.

Practical implications – The paper helps researchers and practitioners to distinguish the research models that can be adopted for the study of information security awareness organizational process, by identifying the key dimensions along which they differ.

Originality/value – The proposed typology provides a guide to identify the range of options available to researchers and practitioners when they design their work regarding the security awareness topic. Moreover, it can facilitate the communication between scholars in the field of security awareness.

Keywords:

Data security, Information systems, Modelling, Organizational theory

Article Type:

Literature review

References:

44 references

Article URL:

www.emeraldinsight.com/10.1108/09685220810893216

Key Readings

Top