Improving information security awareness and behaviour through dialogue, participation and collective reflection. An intervention study

Lessons Learned from an Information Security Incident: A Practical Recommendation to Involve Employees in Information Security

“…A study conducted by Safa et al uses these aspects to reveal the influences of involvement on employees' attitude towards compliance with information security policies (ISP) [28]. Results show that information security knowledge sharing [12,33], collaboration [37], intervention [3,24], and information security experience [27] all have significant effects on an individuals' attitudes towards information security compliance with ISP.…”

Stories as informal lessons about security

“…There has been much effort devoted to training users in organizations to be more secure, and some researchers have investigated the effects of different kinds of training programs and security policies on security outcomes [4,11]. Microsoft has an extensive online resource for teaching users all about computer security [1].…”

The professionalisation of information security: Perspectives of UK practitioners

“…They must be persuaded of a threat to their interests and that their action might be effective against it (Herath and Rao, 2009;Besnard and Arief, 2004;Siponen, 2000;Al-Awadi, 2009;Fulford and Doherty, 2003). To enable this, policies must be the product of dialogue rather than artefacts of diktat (Albrechtsen, 2007;Albrechtsen and Hovden, 2010;Gagn e et al, 2008).…”