Download our Information Security papers
A few of our academic papers.
Because of bandwidth constraints I have put up only a few of our papers for download in pdf format. Most of the other papers are available on the Internet as well, just use Google Scholar to find them.
Exploring Organisational Security Culture: Developing a comprehensive research model.
Our earliest conference paper on security culture. The latest paper on our case studies to explore Security culture is Organizational Security Culture: Extending the End-User Perspective published in Computers and Security (Reference).
Until now the concept of ‘security culture’ has not been clearly defined in the literature. To develop a research model that can be used to assess the quality of an organisation’s security culture, we adapted a comprehensive framework from organisational culture. This framework was chosen because it summarised existing organisational culture literature succinctly into eight descriptive dimensions, and also identified a set of Total Quality Management (TQM) values pertinent to each dimension that were useful in translating it to a security research model. In this paper we present a description of the first of several case studies to demonstrate the effectiveness of this research model in describing and explaining the security culture of this organization.
Developing a framework for understanding Security Governance.
A research framework of Security Governance was created from a literature review into Corporate Governance, IT Governance, and Security Management. Reported in this paper is an initial case study based on this framework. The framework covers the following areas of Security Governance: Strategic Context, Decision Making Rights, Accountability Infrastructures, Input Rights, and Experience and Culture. Although the initial case study was limited due to the participating organisations’ concerns about security, the framework still provided an insightful and interesting description about Security Governance in organisations.
