Skip to main content
SpringerLink
Log in

A Model for Information Security Culture with Innovation and Creativity as Enablers

  • Conference paper
  • First Online:
Human Aspects of Information Security and Assurance (HAISA 2022)

Part of the book series: IFIP Advances in Information and Communication Technology ((IFIPAICT,volume 658))

  • 554 Accesses

Abstract

This research aims to elicit a conceptual understanding of creativity and innovation to enable a totally aligned information security culture. Stimulating the creativity and innovation of employees in an organisation can help to solve information security problems and to create a culture where information security issues are addressed and resolved, as opposed to being introduced by end-users. The study applied a theoretical approach with a scoping literature review using the PRISMA method to derive traits and programmes that organisations can implement to stimulate creativity and innovation as part of the organisational culture. A model for engendering employee creativity and innovation as part of the information security culture is proposed, through the lens of the three levels of organisational culture. This study both offers novel insights for managerial practice and serves as a point of reference for further academic research about the influence of creativity and innovation in information security culture.

This is a preview of subscription content, log in via an institution to check access.

Access this chapter

Log in via an institution
Chapter
USD 29.95
Price excludes VAT (USA)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever
eBook
USD 99.00
Price excludes VAT (USA)
  • Available as EPUB and PDF
  • Read on any device
  • Instant download
  • Own it forever
Softcover Book
USD 129.99
Price excludes VAT (USA)
  • Compact, lightweight edition
  • Dispatched in 3 to 5 business days
  • Free shipping worldwide - see info
Hardcover Book
USD 129.99
Price excludes VAT (USA)
  • Durable hardcover edition
  • Dispatched in 3 to 5 business days
  • Free shipping worldwide - see info

Tax calculation will be finalised at checkout

Purchases are for personal use only

Institutional subscriptions

References

  1. Andleeb, N., Ahmad, M.F., Hassan, M.F., Rahman, N.A.A., Abdullah, A.S., Nawi, M.N.M.: Linkage of knowledge sharing, organizational culture, supply chain strategies towards employee creativity in manufacturing organizations. Int. J. Supply Chain Manage. 9, 132–140 (2020)

    Google Scholar 

  2. Javanmardi Kashan, A., Wiewiora, A., Mohannak, K.: Unpacking organisational culture for innovation in Australian mining industry. Resour. Policy 73, 1021249 (2021). https://doi.org/10.1016/j.resourpol.2021.102149

    Article  Google Scholar 

  3. Robbins, S.P., Judge, T.A., Odendaal, A., Roodt, G.: Organisational behaviour - Global and Southern African Perspectives, 3rd edn. Pearson Holdings South Africa, Cape Town (2018)

    Google Scholar 

  4. Strychalska-Rudzewicz, A., Rudzewicz, A.: The impact of organizational innovativeness on Ffirm performance in Poland. The moderating role of innovation culture. European Research Studies Journal. XXIV, 130–148 (2021)

    Google Scholar 

  5. Bianchi, C.E., Tontini, G., Gomes, G.: Relationship between subjective well-being, perceived organisational culture and individual propension to innovation. European J. Innova. Manage. ahead-of-print, 1460–1060 (2021). https://doi.org/10.1108/EJIM-01-2021-0045

  6. Shahzad, F., Xiu, G.Y., Shahbaz, M.: Organizational culture and innovation performance in Pakistan’s software industry. Technol. Soc. 51, 66–73 (2017). https://doi.org/10.1016/j.techsoc.2017.08.002

    Article  Google Scholar 

  7. Martins, E.C., Terblanche, F.: Building organisational culture that stimulates creativity and innovation. Eur. J. Innov. Manag. 6, 64–74 (2003). https://doi.org/10.1108/14601060310456337

    Article  Google Scholar 

  8. Makumbe, W.: The impact of organizational culture on employee creativity amongst Zimbabwean academics. African J. Sci. Technol.Innova. Develo. (2021). https://doi.org/10.1080/20421338.2020.1864882

  9. Hwang, K., Choi, M.: Effects of innovation-supportive culture and organizational citizenship behavior on e-government information system security stemming from mimetic isomorphism. Gov. Inf. Q. 34, 183–198 (2017)

    Article  Google Scholar 

  10. Mimecast: Confronting the new wave of cyberattacks - The State of Email Security 2022 (2022)

    Google Scholar 

  11. ENISA: Cyber Security Culture in organisations. European Union Agency for Network and Information Security (ENISA) (2017)

    Google Scholar 

  12. Da Veiga, A., Astakhova, L. V., Botha, A., Herselman, M.: Defining organisational information security culture—perspectives from academia and industry. Computers and Security 92 (2020). https://doi.org/10.1016/j.cose.2020.101713

  13. Scaliza, J.A.A., et al.: Relationships among organizational culture, open innovation, innovative ecosystems, and performance of firms. J. Bus. Res. 140, 264–279 (2022). https://doi.org/10.1016/j.jbusres.2021.10.065

  14. Schein, E.H.: Organizational culture and leadership. Jossey-Bass, San Francisco (1985)

    Google Scholar 

  15. Lin, C., Wittmer, J.L.S.: Proactive information security behavior and individual creativity: effects of group culture and decentralized IT governance. In: IEEE International Conference on Intelligence and Security Informatics: Security and Big Data, pp. 1–6. IEEE International Conference on Intelligence and Security Informatics: Security and Big Data (2017)

    Google Scholar 

  16. Tolah, A., Furnell, S.M., Papadaki, M.: An empirical analysis of the information security culture key factors framework. Computers & Security 108 (2021). https://doi.org/10.1016/j.cose.2021.102354

  17. AlHogail, A.: Design and validation of information security culture framework. Comput. Hum. Behav. 49, 567–575 (2015). https://doi.org/10.1016/j.chb.2015.03.054

    Article  Google Scholar 

  18. Martins, E.C., Martins, N., Terblanche, F.: An organisational culture model to stimulate creativity and innovation in a university library. Advances in Library Administration and Organization 21, 83–130 (2004). https://doi.org/10.1016/S0732-0671(04)21003-3

    Article  Google Scholar 

  19. Hayden, L.: People-centric security Transforming your enterprise security culture. McGraw-Hill Education, New York (2016)

    Google Scholar 

  20. Van Niekerk, J., Von Solms, R.: A holistic framework for the fostering of an information security sub-culture in organizations. In: Proceedings of the Information Security South Africa Conference, pp. 1–13 (2005)

    Google Scholar 

  21. Schlienger, T., Teufel, S.: Information security culture: the socio-cultural dimension in information security management. In: Proceedings of the IFIP TC11 17th International Conference on Information Security: Visions and Perspectives, pp. 191–202 (2002)

    Google Scholar 

  22. Von Solms, R., Van Niekerk, J.: From information security to cyber security. Comput. Secur. 38, 97–102 (2013). https://doi.org/10.1016/j.cose.2013.04.004

    Article  Google Scholar 

  23. Da Veiga, A.: Information Security Culture. In: Encyclopedia of Cryptography, Security and Privacy, pp. 1–4. Springer Berlin Heidelberg (2021). https://doi.org/10.1007/978-3-642-27739-9

  24. Da Veiga, A.: Achieving a Security Culture. In: Cybersecurity Education for Awareness and Compliance, pp. 72–100. IGI Global, Hershey PA, USA (2019). https://doi.org/10.4018/978-1-5225-7847-5.ch005

  25. Auernhammer, J., Hall, H.: Organizational culture in knowledge creation, creativity and innovation: towards the Freiraum model. J. Inf. Sci. 40, 154–166 (2014). https://doi.org/10.1177/0165551513508356

    Article  Google Scholar 

  26. Ciuciu, R.A., Mateescu, V., Ciuciu, I.: Organizational Culture and Innovation: An Industrial Case Study. In: Meersman, R., et al. (eds.) OTM 2014. LNCS, vol. 8842, pp. 514–518. Springer, Heidelberg (2014). https://doi.org/10.1007/978-3-662-45550-0_52

    Chapter  Google Scholar 

  27. Scheibe, K.P., Gupta, M.: The effect of socializing via computer-mediated communication on the relationship between organizational culture and organizational creativity. Commu. Associ. Info. Sys. 40, 294–314 (2017). https://doi.org/10.17705/1cais.04013

  28. Ogbeibu, S., Senadjki, A., Luen Peng, T.: An organisational culture and trustworthiness multidimensional model to engender employee creativity. American Journal of Business. 33, 179–202 (2018). https://doi.org/10.1108/ajb-12-2017-0043

    Article  Google Scholar 

  29. Grant, M.J., Booth, A., Centre, S.: A typology of reviews: an analysis of 14 review types and associated methodologies. Health Info. Libr. J. 26, 91–108 (2009). https://doi.org/10.1111/j.1471-1842.2009.00848.x

    Article  Google Scholar 

  30. Moher, D., Liberati, A., Tetzlaff, J., Altman, D.G., Group, P.: Preferred reporting items for systematic reviews and meta-analyses: The PRISMA statement. Annuls of Internal Medicine 151(4), 264-270 (2009)

    Google Scholar 

  31. Ambile, T.M.: Creativity in context. Westview Press, Boulder, CO (1996)

    Google Scholar 

  32. Padayachee, K.: Taxonomy of compliant information security behavior. Comput. Secur. 31, 673–680 (2012). https://doi.org/10.1016/j.cose.2012.04.004

    Article  Google Scholar 

  33. Martins, E.C., Meyer, H.W.J.: Organizational and behavioral factors that influence knowledge retention. J. Knowl. Manag. 16, 77–96 (2012). https://doi.org/10.1108/13673271211198954

    Article  Google Scholar 

  34. Quinn, R.E., Rohrbaugh, J.: A spatial model of effectiveness criteria - towards a competing values approach to organizational analysis. Manage. Sci. 29, 363–377 (1983)

    Article  Google Scholar 

  35. Cameron, K.S., Quinn, R.E.: Diagnosing and changing organizational culture: Based on the competing values framework. Jossey-Bass, San Francisco, CA (2011)

    Google Scholar 

  36. Choo, C.W.: Information culture and organizational effectiveness. Int. J. Inf. Manage. 33, 775–779 (2013). https://doi.org/10.1016/j.ijinfomgt.2013.05.009

    Article  Google Scholar 

  37. Colovic, A., Williams, C.: Group culture, gender diversity and organizational innovativeness: Evidence from Serbia. J. Bus. Res. 110, 282–291 (2020). https://doi.org/10.1016/j.jbusres.2019.12.046

    Article  Google Scholar 

  38. Gorzelany, J., et al.: Finding links between organisation’s culture and innovation. The impact of organisational culture on university innovativeness. Plos ONE. 16 (2021). https://doi.org/10.1371/journal.pone.0257962

  39. Ogbeibu, S., Senadjki, A., Gaskin, J.: The moderating effect of benevolence on the impact of organisational culture on employee creativity. J. Bus. Res. 90, 334–346 (2018). https://doi.org/10.1016/j.jbusres.2018.05.032

    Article  Google Scholar 

Download references

Author information

Authors and Affiliations

  1. School of Computing, College of Science, Engineering and Technology, University of South Africa (UNISA), Florida Campus, Johannesburg, South Africa

    Adéle da Veiga

Authors
  1. Adéle da Veiga
    View author publications

    You can also search for this author in PubMed Google Scholar

Corresponding author

Correspondence to Adéle da Veiga .

Editor information

Editors and Affiliations

  1. University of Plymouth, Plymouth, UK

    Nathan Clarke

  2. University of Nottingham, Nottingham, UK

    Steven Furnell

Rights and permissions

Reprints and permissions

Copyright information

© 2022 IFIP International Federation for Information Processing

About this paper

Check for updates. Verify currency and authenticity via CrossMark

Cite this paper

da Veiga, A. (2022). A Model for Information Security Culture with Innovation and Creativity as Enablers. In: Clarke, N., Furnell, S. (eds) Human Aspects of Information Security and Assurance. HAISA 2022. IFIP Advances in Information and Communication Technology, vol 658. Springer, Cham. https://doi.org/10.1007/978-3-031-12172-2_14

Download citation

  • DOI: https://doi.org/10.1007/978-3-031-12172-2_14

  • Published:

  • Publisher Name: Springer, Cham

  • Print ISBN: 978-3-031-12171-5

  • Online ISBN: 978-3-031-12172-2

  • eBook Packages: Computer ScienceComputer Science (R0)

Publish with us

Policies and ethics

Societies and partnerships

Search

Navigation