Information Security: Corporate Culture and Organizational Commitment

Information is the most valuable asset in the so-called ‘information society’. The main purpose of information security is to protect information and specifically, the integrity, confidentiality, authenticity and availability of data through an organization’s network and telecommunication channels. Although information security is critical for organizations to survive, a number of studies continue to report incidents of critical information loss. To this end, there is still an increasing interest to study information security from a non-technical perspective. In doing so, this research focuses on the effect of strong corporate cultures and organizational commitment as important aspects for enhancing information security. That is, manipulating more effectively information security among end-users. Achieving the required level of information security within organizations usually requires more than security awareness and control but also a better understanding of the organizations’ culture in which security measures are tailored, too. In effect, organizations have a clearer insight into how to commit more effectively to such security measures.