Explaining the Development of Information Security Climate and an Information Security Support Network: A Longitudinal Social Network Analysis

  • Duy Dang-Pham School of Science and Technology (RMIT Vietnam) & School of Business IT and Logistics (RMIT University) http://orcid.org/0000-0002-7798-6635
  • Karlheinz Kautz School of Business IT and Logistics, RMIT University
  • Siddhi Pittayachawan School of Business IT and Logistics, RMIT University
  • Vince Bruno School of Business IT and Logistics, RMIT University
Keywords: behavioural information security, information security climate, information security management, social network analysis, stochastic actor-oriented modelling

Abstract

Behavioural information security (InfoSec) research has studied InfoSec at workplaces through the employees’ perceptions of InfoSec climate, which is determined by observable InfoSec practices performed by their colleagues and direct supervisors. Prior studies have identified the antecedents of a positive InfoSec climate, in particular socialisation through the employees’ discussions of InfoSec-related matters to explain the formation of InfoSec climate based on the employees’ individual cognition. We conceptualise six forms of socialisation as six networks, which comprise employees’ provisions of (1) work advice, (2) organisational updates, (3) personal advice, (4) trust for expertise, (5) InfoSec advice, and (6) InfoSec troubleshooting support. The adoption of a longitudinal social network analysis (SNA), called stochastic actor-oriented modelling (SAOM), enabled us to analyse the changes in the socialising patterns and the InfoSec climate perceptions over time. Consequently, this analysis explains the forming mechanisms of the employees’ InfoSec climate perceptions as well as their socialising process in greater detail. Our findings in relation to the forming mechanisms of InfoSec-related socialisation and InfoSec climate, provide practical recommendations to improve organisational InfoSec. This includes identifying influential employees to diffuse InfoSec knowledge within a workplace. Additionally, this research proposes a novel approach for InfoSec behavioural research through the adoption of SNA methods to study InfoSec-related phenomena.
Published
2019-07-08
How to Cite
Dang-Pham, D., Kautz, K., Pittayachawan, S., & Bruno, V. (2019). Explaining the Development of Information Security Climate and an Information Security Support Network: A Longitudinal Social Network Analysis. Australasian Journal of Information Systems, 23. https://doi.org/10.3127/ajis.v23i0.1822
Section
Selected Papers from the Australasian Conference on Information Systems (ACIS)