Value-focused assessment of ICT security awareness in an academic environment

Computers and Security

Volumn 26, Issue 1, 2007, Pages 36-43

  Drevin, L ^a   Kruger, H A ^a   Steyn, T ^a  

^a NORTH WEST UNIVERSITY   (South Africa)

Author keywords

Fundamental objectives; ICT security awareness; Means objectives; Security culture; Security planning; Value focused assessment

Indexed keywords

DATA PRIVACY; INFORMATION TECHNOLOGY; SECURITY SYSTEMS;

FUNDAMENTAL OBJECTIVES; ICT SECURITY AWARENESS; SECURITY CULTURE; SECURITY PLANNING; VALUE-FOCUSED ASSESSMENT;

SECURITY OF DATA;

EID: 33846807812     PISSN: 01674048     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.cose.2006.10.006     Document Type: Article

References (15)

1. BS7799. Code of practice for information security management (1999), British Standards Institute, UK
2. Czernowalow M. Lack of policy causes IT risks. Available from: ITWEB (15 July 2005).
3. Dhillon G, Torkzadeh G. Value-focused assessment of information system security in organizations. In: Proceedings of the 22nd international conference on information systems; 2001. p. 561-6.
4. Dhillon G, Bardacino J, Hackney R. Value focused assessment of individual privacy concerns for Internet commerce. In: Proceedings of the 23rd international conference on information systems; 2002. p. 705-9.
5. Glaser B.G., and Strauss A.L. The discovery of grounded theory: strategies for qualitative research (1967), Aldine de Gruyter, New York
6. Hassan O.A.B. Application of value-focused thinking on the environmental selection of wall structures. Journal of Environmental Management 70 (2004) 181-187
7. Keeney R.L. Creativity in decision making with value-focused thinking. Sloan Management Review Summer (1994) 33-41
8. Nah F.F., Siau K., and Sheng H. The value of mobile applications: a utility company study. Communications of the ACM 48 2 (2005) 85-90
9. In: Pearsall J. (Ed). Concise Oxford English Dictionary. 10th ed. (2002), Oxford University Press
10. Pfleeger C.P., and Pfleeger S.L. Security in computing. 3rd ed. (2003), Prentice Hall
11. Pipkin D.L. Information security: protecting the global enterprise (2000), Prentice Hall
12. SANS. Sysadmin, Audit, Network Security Institute; 2006. [accessed 1 February 2006].
13. Schlienger T., and Teufel S. Information security culture - from analysis to change. South African Computer Journal 31 (2003) 46-52
14. Sheng H., Nah F.F., and Siau K. Strategic implications of mobile technology: a case study in using value-focused thinking. Journal of Strategic Information Systems 14 3 (2005) 269-290
15. Whitman M.E., and Mattord H.J. Principles of information security. 2nd ed. (2005), Thomson