Information security collaboration formation in organisations

Abstract

Collaboration between employees in the domain of information security efficiently mitigates the effect of information security attacks on organisations. Collaboration means working together to do or to fulfil a shared goal, the target of which in this paper is the protection of the information assets in organisations. Information Security Collaboration (ISC) aims to aggregate the employees' contribution against information security threats. This study clarifies how ISC is to be developed and how it helps to reduce the effect of attacks. The socialisation of collaboration in the domain of information security applies two essential theories: Social Bond Theory (SBT) and the Theory of Planned Behaviour (TPB). The results of the data analysis revealed that personal norms, involvement, and commitment significantly influence the employees' attitude towards ISC intention. However, contrary to our expectation, attachment does not influence the attitude of employees towards ISC. In addition, attitudes towards ISC, perceived behavioural control, and personal norms significantly affect the intention towards ISC. The findings also show that the intention for ISC and organisational support positively influence ISC, but that trust does not significantly affect ISC behaviour.

Enforcing Information System Security

“…Bauer et al (2017) similarly concluded that IS intervention influenced users' neutralization behaviors and improved IS knowledge and responsibilities. Finally, experience effectively increased awareness of potential IS threats and positively influenced attitudes about policy compliance, in line with other studies (e.g., Safa et al, 2017;Tatu et al, 2018).…”

“…Thus, an individual can become more proficient after expending the effort and time to gain experience in a field and more prone to handle problems by looking for effective solutions (Blythe & Coventry, 2018;Liang et al, 2022;Tatu et al, 2018). In IS, experience increases user awareness of potential threats (Tatu et al, 2018), an important aspect of a secure information environment (Safa et al, 2017). This informed the seventh hypothesis:…”

“…It can facilitate sending, improving, or reviewing knowledge and expand the knowledge communicated between employees and IT security specialists, alerting both to threats and breaches and raising their security awareness. In this way, collaboration helps minimize such incidents, protect against breaches, and draw employee attention to the significance of compliance with ISPP Safa et al, 2017;Tatu et al, 2018). These ideas led to the fifth hypothesis:…”

“…Attitudes are based on three components: a cognitive component, the ideas and beliefs about something; an affective component, involving how the person, issue, or event affects emotions and feelings; and a behavioral component, determining how attitude can affect behavior or intention to perform a behavior (Cherry, 2018). Moreover, past and present experience shapes attitudes (Ajzen, 2001;Mutambik et al, 2023b;Safa et al, 2017). This applies to IS, where a positive attitude toward policy compliance should result in more employee compliance.…”

Contemplating social engineering studies and attack scenarios: A review study

“…Theory of planned behavior The theory says that the attitude toward the behavior and subjective norms form an individual's behavioral intentions and actions 3,30,31 Neutralization theory Neutralization theory is a psychological method for people to turn off "inner resistance" when they perform or are about to perform something that they perceive as ethically wrong 3 Learning theory Learning theory explains how information is understood, treated, and retained by participants during the learning process 3 Protection motivation theory The protection motivation theory argues that people guard themselves based on four factors: (a) the perceived severity of an event and the occurrence; (b) vulnerability of the person; (c) the person's ability for the preventive behavior; and (d) believe in his ability to protect 3,30 General deterence theory General Deterrence is a plan designed to deter an opponent from taking actions which are not yet initiated or in another case to prevent people from performing actions that opponent wants them to do 30 Social learning theory Social Learning Theory asserts that people acquire knowledge from one another, via perception, memory, and modeling 30 Social bonding theory Social bond theory is used to explain social issues. Factors of social bonding comprise an attachment to families, devotion to social norms and institutions, engagement in activities, and the faith that these things are essential [30][31][32] General strains theory Innovation happens when community stresses culturally acceptable goals but at the same time provides insufficient opportunity to accomplish these goals with the legal institutionalized means. People finding themselves in financial strain may find a solution of crime in order to achieve goals 30 Organizational injustice If the leaders of the institution are authoritarian, their effort to solve the problems may be ineffective due to many reasons and may increase organizational stress and efficiency of the employees.…”