A Cross-Cultural Investigation of Information Security Awareness (ISA)

Abstract

The past decade of literature has seen a developing body of research focusing on the role of the employee and the associated individual differences that may influence information security in the workplace. While this research has evoked significant findings which identify a variety of factors that influence individual Information Security Awareness (ISA), the results associated with age and gender have been inconsistent (Hadlington, Popovac, Janicke, Yevseyeva, & Jones, 2018; McCormac et al., 2017). In addition, the rate of security breaches continue to rise, with the behaviours of employees identified as a source of ninety-five percent of security incidents (IMB Global Technology Services, 2014). This highlights the need for a greater focus and understanding on human aspects of information security, particularly concerning national culture, which has been very limited in focus within past research. The challenges to determine the factors contributing to information security prove to be complex. Information security awareness is now attracting more attention from industry, as stakeholders are held accountable for the information with which they work (Kritzinger & Smith, 2009). This review will provide an initial assessment of the literature on ISA, individual differences, and national culture. Industry sector will also be considered.