Please use this identifier to cite or link to this item: http://hdl.handle.net/10125/60074

For What Technology Can’t Fix: Building a Model of Organizational Cybersecurity Culture

File Size Format  
0634.pdf 906.77 kB Adobe PDF View/Open

Item Summary

Title:For What Technology Can’t Fix: Building a Model of Organizational Cybersecurity Culture
Authors:Huang, Keman
Pearlson, Keri
Keywords:Practice-based IS Research
Organizational Systems and Technology
Cybersecurity Culture, Organizational Mechanism, Behaviors, Case Study
Date Issued:08 Jan 2019
Abstract:Organizational cybersecurity requires more than just the latest technology. To secure an organization, all members of the organization must act to reduce risk. Leaders have a special responsibility to understand, shape and align the beliefs, values, and attitudes of the entire organization with overall security goals. Managers need practical solutions for dealing with the human side of cybersecurity. The model presented in this paper describes organizational cybersecurity culture, the factors that contribute to its creation, and how it can be measured. A case study of a “culture of data protection” created by leaders at financial services firm Liberty Mutual illustrates these factors to help managers understand and apply recommendations to create a more mature cyber security culture in their organization.
Pages/Duration:10 pages
URI:http://hdl.handle.net/10125/60074
ISBN:978-0-9981331-2-6
DOI:10.24251/HICSS.2019.769
Rights:Attribution-NonCommercial-NoDerivatives 4.0 International
https://creativecommons.org/licenses/by-nc-nd/4.0/
Appears in Collections: Practice-based IS Research


Please email libraryada-l@lists.hawaii.edu if you need this content in ADA-compliant format.

This item is licensed under a Creative Commons License Creative Commons