Information security culture model for Malaysian organizations: A review

The establishment of Information Security Culture (ISC) has been recommended for improving employees’ information security in the organization. To date, there is still no clear guidance or model for assessing and cultivating ISC for Malaysian organizations, despite some Malaysian-based studies being...

Full description

Bibliographic Details
Main Authors: Akhyari, Nasir, Ruzaini, Abdullah Arshah, Ab Hamid, Mohd Rashid, Syahrul, Fahmy, Mohd Tamizan, Abu Bakar
Format: Article
Language:English
Published: The World Academy of Research in Science and Engineering 2020
Subjects:
Online Access:http://umpir.ump.edu.my/id/eprint/30431/
http://umpir.ump.edu.my/id/eprint/30431/1/Information%20security%20culture%20model%20for%20malaysian%20organizations.pdf
_version_ 1848823512243896320
author Akhyari, Nasir
Ruzaini, Abdullah Arshah
Ab Hamid, Mohd Rashid
Syahrul, Fahmy
Mohd Tamizan, Abu Bakar
author_facet Akhyari, Nasir
Ruzaini, Abdullah Arshah
Ab Hamid, Mohd Rashid
Syahrul, Fahmy
Mohd Tamizan, Abu Bakar
author_sort Akhyari, Nasir
building UMP Institutional Repository
collection Online Access
description The establishment of Information Security Culture (ISC) has been recommended for improving employees’ information security in the organization. To date, there is still no clear guidance or model for assessing and cultivating ISC for Malaysian organizations, despite some Malaysian-based studies being carried out. In order to shed light to this issue, we reviewed all ISC models developed in Malaysian context to identify models for particular types of organization in Malaysia. Three major databases of Web of Science, Scopus and Google Scholar were systematically exhausted and we found only six papers from 2000 to 2018 that met our selection criteria. Our analysis revealed that there is a lack of validated ISC models have been produced for particular types of organization. The current model only applicable to healthcare, library and public organizations in Malaysia. In addition, there is a lack of consistency in terms of ISC factors used in the ISC models and there is no common set of factors could be applied for all type of Malaysian organization. This review has amplified the need for a more thorough and in-depth studies for ISC model in Malaysian context.
first_indexed 2025-11-15T02:58:19Z
format Article
id ump-30431
institution Universiti Malaysia Pahang
institution_category Local University
language English
last_indexed 2025-11-15T02:58:19Z
publishDate 2020
publisher The World Academy of Research in Science and Engineering
recordtype eprints
repository_type Digital Repository
spelling ump-304312021-01-11T06:24:59Z http://umpir.ump.edu.my/id/eprint/30431/ Information security culture model for Malaysian organizations: A review Akhyari, Nasir Ruzaini, Abdullah Arshah Ab Hamid, Mohd Rashid Syahrul, Fahmy Mohd Tamizan, Abu Bakar QA76 Computer software TK Electrical engineering. Electronics Nuclear engineering The establishment of Information Security Culture (ISC) has been recommended for improving employees’ information security in the organization. To date, there is still no clear guidance or model for assessing and cultivating ISC for Malaysian organizations, despite some Malaysian-based studies being carried out. In order to shed light to this issue, we reviewed all ISC models developed in Malaysian context to identify models for particular types of organization in Malaysia. Three major databases of Web of Science, Scopus and Google Scholar were systematically exhausted and we found only six papers from 2000 to 2018 that met our selection criteria. Our analysis revealed that there is a lack of validated ISC models have been produced for particular types of organization. The current model only applicable to healthcare, library and public organizations in Malaysia. In addition, there is a lack of consistency in terms of ISC factors used in the ISC models and there is no common set of factors could be applied for all type of Malaysian organization. This review has amplified the need for a more thorough and in-depth studies for ISC model in Malaysian context. The World Academy of Research in Science and Engineering 2020 Article PeerReviewed pdf en http://umpir.ump.edu.my/id/eprint/30431/1/Information%20security%20culture%20model%20for%20malaysian%20organizations.pdf Akhyari, Nasir and Ruzaini, Abdullah Arshah and Ab Hamid, Mohd Rashid and Syahrul, Fahmy and Mohd Tamizan, Abu Bakar (2020) Information security culture model for Malaysian organizations: A review. International Journal of Advanced Trends in Computer Science and Engineering, 9 (1.3). pp. 117-121. ISSN 2278-3091. (Published) https://doi.org/10.30534/ijatcse/2020/1691.32020 https://doi.org/10.30534/ijatcse/2020/1691.32020
spellingShingle QA76 Computer software
TK Electrical engineering. Electronics Nuclear engineering
Akhyari, Nasir
Ruzaini, Abdullah Arshah
Ab Hamid, Mohd Rashid
Syahrul, Fahmy
Mohd Tamizan, Abu Bakar
Information security culture model for Malaysian organizations: A review
title Information security culture model for Malaysian organizations: A review
title_full Information security culture model for Malaysian organizations: A review
title_fullStr Information security culture model for Malaysian organizations: A review
title_full_unstemmed Information security culture model for Malaysian organizations: A review
title_short Information security culture model for Malaysian organizations: A review
title_sort information security culture model for malaysian organizations: a review
topic QA76 Computer software
TK Electrical engineering. Electronics Nuclear engineering
url http://umpir.ump.edu.my/id/eprint/30431/
http://umpir.ump.edu.my/id/eprint/30431/
http://umpir.ump.edu.my/id/eprint/30431/
http://umpir.ump.edu.my/id/eprint/30431/1/Information%20security%20culture%20model%20for%20malaysian%20organizations.pdf