Assessing the level of I.T. security culture improvement: Results from three Australian SMEs

Abstract

Transitioning towards an improved IT security culture that fosters desired IT security behaviour and attitudes in individuals is pertinent to any organizational IT security strategy. To improve the current IT security culture of an organization and its members, an initial assessment covering four core questions was necessary to determine how much of an improvement was needed. The assessments and data collection techniques and corresponding results and findings are presented and discussed. The implications of this research will be of great benefit to both practitioners wanting to improve IT security culture and awareness in their organization, and will help to fill the lack empirical research within the academic field of IT security.