Predicting information security culture among employees of telecommunication companies in an emerging market
Information and Computer Security
ISSN: 2056-4961
Article publication date: 4 August 2021
Issue publication date: 12 November 2021
Abstract
Purpose
The purpose of this study is to examine factors, which influence information security culture among employees of telecommunications companies. The motivation for this study was the rise in the number of data breach incidents caused by the organizations’ own employees.
Design/methodology/approach
A total of 139 usable responses were collected via a Web-based questionnaire survey from employees of Malaysian telecommunications companies. Data were analysed by using SmartPLS 3.
Findings
Security education, training and awareness (SETA) programmes and information security awareness were found to have a positive and significant impact on Information Security Culture. Additionally, self-reported employees’ security behaviour was found to act as a partial mediator on the relationship between information security awareness and information security culture.
Research limitations/implications
The study was cross-sectional in nature. Therefore, it could not measure changes in population over time.
Practical implications
The empirical data provides a new perspective on significant elements that influence information security culture in an emerging market. Organizations in the telecommunications industry can now recognize that SETA programmes and information security awareness have a significant impact on information security culture. Employees’ security behaviour also mediates the relationship between information security awareness and information security culture.
Originality/value
This is the first study to analyse the mediating effect of employees’ security behaviour on the relationship between information security awareness and information security culture in the Malaysian telecommunications context.
Keywords
Acknowledgements
The authors wish to thank Graduate School of Business, Universiti Sains Malaysia for the support in the publication of this paper.
Citation
Md Azmi, N.A.A., Teoh, A.P., Vafaei-Zadeh, A. and Hanifah, H. (2021), "Predicting information security culture among employees of telecommunication companies in an emerging market", Information and Computer Security, Vol. 29 No. 5, pp. 866-882. https://doi.org/10.1108/ICS-02-2021-0020
Publisher
:Emerald Publishing Limited
Copyright © 2021, Emerald Publishing Limited