Towards information security behavioural compliance

Cheryl Vroom

doi:10.1016/j.cose.2004.01.012

Towards information security behavioural compliance

2004-05-01

296

PRE

AI

DOI：10.1016/j.cose.2004.01.012

原文链接

原文求助

摘要

En 中文

Auditing has always played an important rote in the business environment. With the introduction of information technology and the resulting security challenges that organizations face daily, it has become essential to ensure the security of the organization's information and other valuable assets. However, one aspect that auditing does not cover effectively is that of the behaviour of the employee, which is so crucial to any organization's security. The objective of this paper is to explore the potential problems concerning the attempt to audit the behaviour of the employee. It will be demonstrated that it is extremely difficult to audit human behaviour and so an alternative method to behavioural auditing needs to be found, where policing the employee is not necessary, but instead a softer, more informal approach is used to change the culture to a more information security conscious one. (C) 2004 Elsevier Ltd. All rights reserved.

Keyword:

IT auditing

IS security auditing

organizational culture

organizational behaviour

security compliance

Towards information security behavioural compliance

摘要

AI总结

期刊

机构

引用论文