Information security obedience: A definition

Computers and Security

Volumn 24, Issue 1, 2005, Pages 69-75

  Thomson, Kerry Lynn ^a   Von Solms, Rossouw ^a  

^a NELSON MANDELA METROPOLITAN UNIVERSITY   (South Africa)

Author keywords

Corporate culture; Corporate governance; Information security; Information security obedience

Indexed keywords

BUDGET CONTROL; DECISION MAKING; ECONOMIC AND SOCIAL EFFECTS; INFORMATION MANAGEMENT; PUBLIC POLICY; SAFETY FACTOR; STRATEGIC PLANNING;

CORPORATE CULTURE; CORPORATE GOVERNANCE; INFORMATION SECURITY OBEDIENCE; INFORMATION SECURITY POLICIES;

SECURITY OF DATA;

EID: 15744368808     PISSN: 01674048     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.cose.2004.10.005     Document Type: Article

References (26)

1. P. Atkinson Creating culture change - strategies for success 1997 Rushmere Wynne Bedfordshire, England
2. L.R. Beach Making the right decision. Organizational culture, vision and planning 1993 Prentice Hall Eaglewood Cliffs, New Jersey
3. C.A.R. Beveridge Behaviour in organisations [online] [cited 23 January 2003]. Available from: 〈http://www.carb.fsnet.co.uk/bio97.pdf〉 December, 1997
4. J.M. Beyer Handbook of organizational design 1981 Oxford New York
5. Blackwell Publishers [online] [cited 12 January 2002]. Available from: 〈http://www.blackwellpublishers.co.uk/journals/corg〉 2000
6. British Standards Institute. Code of practice for information security management (CoP). DISC PD 0003. UK; 1993.
7. J. Brooks Converging cultures - trends in European corporate governance [online] [cited 12 February 2003]. Available from: 〈http://www.tiaa-cref. org/pressroom/corpgov.pdf〉 April 1997
8. G. Bruce, and R. Dempsey Security in distributed computing - did you lock the door? 1997 Prentice Hall Upper Saddle River, New Jersey
9. BS 7799-1. Code of practice for information security management (CoP). DISC PD 0007. UK; 1999.
10. A. Buren, B. van der Meer, A. Shahim, W. Barnhoorn, and E. Roos Lindgreen Information security at top level Information security management and small systems security 1999 75 76
11. Deloitte, and Touche Management briefing - information security [online] [cited 13 January 2003]. Available from: 〈http://www.deloitte.com/dtt/cda/ doc/content/info_security(1).pdf〉 May 2002
12. Dictionary.com [online] [cited 3 July 2003]. Available from: 〈http://dictionary.reference.com/search?q=obedience〉 2003
13. D. Drennan Transforming company culture 1992 MacGraw-Hill Berkshire, England
14. G. Gordon Dozens of threats beset your data Sunday Times, Business Surveys 2002, May 2 [online] [cited 17July 2002]. Available from: 〈http://www.suntimes.co.za/2002/05/12/business/surveys/internet/survey10. asp〉
15. Gordon, and L.L.C. Glickson Comprehensive information security policies: meeting an organisation's privacy and security needs [online] [cited 23 March 2003]. Available from: 〈http://www.ggtech.com/〉 2001
16. Hagberg Consulting Group Corporate culture/organisational culture: understanding and assessment [online] [cited 25 January 2003]. Available from: 〈http://www.hcgnet.com/html/articles/understanding-Culture.html〉 2002
17. IIA, AICPA, ISACA, and NACD A call to action for corporate governance [online] [cited 16 July 2002]. Available from: 〈http://csweb.rau.ac.za/ ifip/issa2002/presentations/Basie%20von%20Solms.ppt〉 March 2000
18. King Committee on Corporate Governance King report on corporate governance for South Africa 2001 [online] [cited 3 March 2002]. Available from: 〈http://www.iodsa.co.za/IoD%20Draft%20King%20Report.pdf〉 2001
19. Krige, W. The usage of audit logs for effective information security management. Unpublished master's thesis, Port Elizabeth Technikon, Port Elizabeth, South Africa; 1999.
20. V.P. Lane Security of computer based information systems 1985 Macmillan London
21. A. Martins, and J. Eloff Information security culture IFIP TC11, 17th international conference on information security (SEC2002), Cairo, Egypt 2002 Kluwer Academic Publishers Group Netherlands 203 214
22. PriceWaterhouseCoopers Information security breaches survey technical report [online] [cited 5 January 2003]. Available from: 〈http://www. security-survey.co.uk〉 2002
23. E.H. Schein The corporate culture survival guide 1999 Jossey-Bass Publishers San Francisco, California, United States of America
24. M.R. Smith Commonsense computer security 1989 McGraw-Hill London
25. M.E. Whitman, and H.J. Mattord Principles of information security 2003 Thomson Course Technology, Kennesaw State University
26. World Bank Group Corporate governance: a framework for implementation - overview [online] [cited 23 December 2002]. Available from: 〈http://www. worldbank.org/html/fpd/privatesector/cg/docs/gcgfbooklet.pdf〉 1999, September 20