The application of information security policies in large UK-based organizations: an exploratory investigation

Welcome:
Guest

Information Management & Computer Security

ISSN: 0968-5227

Online from: 1993

Subject Area: Information and Knowledge Management

Content: Latest Issue | Latest Issue RSS | Previous Issues

Options: To add Favourites and Table of Contents Alerts please take a Emerald profile

Document Information:
Title:	The application of information security policies in large UK-based organizations: an exploratory investigation
Author(s):	Heather Fulford, (The Business School, Loughborough University, Loughborough, Leicestershire, UK), Neil F. Doherty, (The Business School, Loughborough University, Loughborough, Leicestershire, UK)
Citation:	Heather Fulford, Neil F. Doherty, (2003) "The application of information security policies in large UK-based organizations: an exploratory investigation", Information Management & Computer Security, Vol. 11 Iss: 3, pp.106 - 114
Keywords:	Data security, Information systems, Policy audit, United Kingdom
Article type:	Research paper
DOI:	10.1108/09685220310480381 (Permanent URL)
Publisher:	MCB UP Ltd
Abstract:	Despite its widely acknowledged importance, the information security policy has not, to date, been the subject of explicit, empirical scrutiny, in the academic literature. To help fill this gap an exploratory research project was initiated that sought to investigate the uptake, content, dissemination and impact of information security policies. To this end, a questionnaire was mailed to senior IS executives, in large UK-based organizations, and 208 valid responses were received. The results of this research have indicated that, while policies are now fairly common, at least amongst the sample, there is still a high degree of variety in terms of their content and dissemination.