A general morphological analysis: delineating a cyber-security culture

Abstract

Purpose The purpose of this paper is to define and delineate cyber security culture. Cyber security has been a concern for many years. In an effort to mitigate the cyber security risks, technology-centred measures were deemed to be the ultimate solution. Nowadays, however, it is accepted that the process of cyber security requires much more than mere technical controls. On the contrary, it now demands a human-centred approach, including a cyber security culture. Although the role of cultivating a culture in pursuing cyber security is well appreciated, research focusing intensely on cyber security culture is still in its infancy. Additionally, knowledge on the subject is not clearly bounded and defined. Design/methodology/approach General morphological analysis (GMA) is used to define, structure and analyse the cyber security environment culture. Findings This paper identifies the most important variables in cultivating a cyber security culture. Research implications The delineation of the national cyber security domain will contribute to the relatively new domain of cyber security culture. They contribute to the research community by means of promoting a shared and common understanding of terms. It is a step in the right direction towards eliminating the ambiguity of domain assumptions. Practical implications Practically, the study can assist developing nations in constructing strategies that addresses the key factors that need to be apparent in lieu to cultivating its envisaged national culture of cyber security. Additionally, the GMA will contribute to the development of solutions or means that do not overlook interrelations of such factors. Originality/value Delineating and defining the cyber security culture domain more precisely could greatly contribute to realizing the elements that collectively play a role in cultivating such a culture for a national perspective.

Prevention of cybercrimes in smart cities of India: from a citizen’s perspective

“…The GoI is developing the SCI concept with a core of information communication technology (ICT activity). However, there are concerns that the SCI concept might be adversely affected by security problems (Thomson, Von Solms, & Lauw, 2006;Chaturvedi, Sing, Gupta, & Bhattacharya, 2014;Gcaza, Solms, Grobler, & Vuuren, 2017). It is expected that citizens of SCI would use high-speed internet for ensuring easy access to digital services Chhonker, Verma, & Kar, 2017).…”

“…The GoI is developing the SCI concept with a core of information communication technology (ICT activity). However, there are concerns that the SCI concept might be adversely affected by security problems (Thomson et al ., 2006; Chaturvedi et al ., 2014; Dwivedi, Rana, Janssen, Lal, Williams and Clement, 2017; Dwivedi, Rana, Jeyaraj, Clement and Williams, 2017; Gcaza et al ., 2017). It is expected that citizens of SCI would use high-speed internet for ensuring easy access to digital services (Chatterjee and Kar, 2017; Chhonker et al ., 2017).…”

Simplifying Cyber Security Maturity Models through National Culture: A Fuzzy Logic Approach

“…Awareness campaigns and programs that are designed to improve compliance towards cyber security policies or ensure that the risks surrounding cyber crimes and attacks are fully apprehended can influence a country's maturity [18] because users have certain perceptions that can either positively or negatively impact the security process. It is especially cyber security misbehaviour that has a negative impact on cyber security culture, causing resistance to cyber security measures that can compromise its effectiveness and have an impact on a national level [19]. Finally, different groups of people and organisations would require specific cyber security training and interventions based on their own individual processes and needs [20,21].…”

User, Usage and Usability: Redefining Human Centric Cyber Security

“…The incorporation of an understanding of human behavior into cyber security products and processes can lead to more effective technology ( Pfleeger and Caputo, 2011 ). In contrast, resistance to cyber security measures can compromise the effectiveness of the security level ( Gcaza et al, 2017 ) and as such the psychological aspects should be considered in a true human centric cyber security design. Kraus et al (2017) show that there is a relationship between personality traits and information security.…”

“…Users present overconfidence with an “I won’t be affected by this” attitude. Users have certain perceptions that can either positively or negatively impact their security process ( Gcaza et al, 2017 ). Moreover, Van Schaik et al (2017) show that poor security behaviors are adopted by users and maintained throughout their life progression (from students to workforce).…”