Abstract
Purchase PDF (246 K)
E-mail Article
Add to my Quick Links
Cited By in Scopus (5)
Purchase PDF (1109 K)
doi:10.1016/j.cose.2004.08.011 
Copyright © 2004 Elsevier Ltd All rights reserved.
Information systems security policies: a contextual perspective
Received 6 April 2004;
References and further reading may be available for this article. To view references and further reading you must purchase this article.
Abstract
The protection of information systems is a major problem faced by organisations. The application of a security policy is considered essential for managing the security of information systems. Implementing a successful security policy in an organisation, however, is not a straightforward task and depends on many factors. This paper explores the processes of formulating, implementing and adopting a security policy in two different organisations. A theoretical framework based on the theory of contextualism is proposed and applied in the analysis of these cases. The contextual perspective employed in this paper illuminates the dynamic nature of the application of security policies and brings forth contextual factors that affect their successful adoption.
Keywords: Information systems; Security policy implementation; Security policy adoption; Contextualism; Security awareness
Article Outline
- Introduction
- Theoretical framework
- The theory of contextualism and processual research
- Levels of analysis
- Key elements in contextual research
- Perspectives on the application of IS security policies: power and culture
- Framework for analysis
- Research strategy and design
- Description and analysis of the case studies
- The CTDI case: overview and findings
- Contextual analysis of the CTDI case
- The SSI case: overview and findings
- Contextual analysis of the SSI case
- Findings and conclusions from the case studies
- Conclusions and further research
- Acknowledgements
- References
- Vitae
