{"id":"https://openalex.org/W130727141","doi":null,"title":"Fostering information security culture in small and medium size enterprises: an interpretive study in Australia","display_name":"Fostering information security culture in small and medium size enterprises: an interpretive study in Australia","publication_year":2007,"publication_date":"2007-01-01","ids":{"openalex":"https://openalex.org/W130727141","mag":"130727141"},"language":"en","primary_location":{"id":"pmh:oai:aisel.aisnet.org:ecis2007-1076","doi":null,"is_oa":true,"landing_page_url":"http://aisel.aisnet.org/ecis2007/120","pdf_url":"http://aisel.aisnet.org/ecis2007/120","source":{"id":"https://openalex.org/S30879505","display_name":"Journal of the Association for Information Systems","issn_l":"1536-9323","issn":["1536-9323"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["abdc-a-star","anvur-scientific","cwts-core","dongbi-a","fnege-1","jufo-3","norway-2","poland-140","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310321080","host_organization_name":"Association for Information Systems","host_organization_lineage":["https://openalex.org/P4310321080"],"host_organization_lineage_names":["Association for Information Systems"],"type":"journal"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"ECIS 2007 Proceedings","raw_type":"text"},"volume":null,"type":"article","is_traditional":true,"indexed_in":[],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"http://aisel.aisnet.org/ecis2007/120","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5061289490","display_name":"Sneza Dojkovski","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Sneza Dojkovski","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5028184733","display_name":"Sharman Lichtenstein","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Sharman Lichtenstein","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5084370797","display_name":"Matthew J. Warren","orcid":"https://orcid.org/0000-0002-7529-431X","observed_orcids":["https://orcid.org/0000-0002-7529-431X"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Matthew Warren","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":2.9231,"has_fulltext":true,"cited_by_count":55,"citation_normalized_percentile":{"value":0.9216509,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":95,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"1560","last_page":"1571"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11572","display_name":"Information Technology Governance and Strategy","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1404","display_name":"Management Information Systems"},"field":{"id":"https://openalex.org/fields/14","display_name":"Business, Management and Accounting"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11045","display_name":"Privacy, Security, and Data Protection","score":0.0,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/information-security-culture","display_name":"information security culture","score":0.996999979019165},{"id":"https://openalex.org/keywords/small-and-medium-sized-enterprises","display_name":"small and medium-sized enterprises","score":0.9279999732971191},{"id":"https://openalex.org/keywords/organizational-culture","display_name":"organizational culture","score":0.7590000033378601},{"id":"https://openalex.org/keywords/information-security-awareness","display_name":"information security awareness","score":0.7200000286102295},{"id":"https://openalex.org/keywords/risk-preferences","display_name":"risk preferences","score":0.8840000033378601},{"id":"https://openalex.org/keywords/risk-based-approach","display_name":"risk-based approach","score":0.8140000104904175},{"id":"https://openalex.org/keywords/information-security-management","display_name":"information security management","score":0.6959999799728394},{"id":"https://openalex.org/keywords/employee-behavior","display_name":"employee behavior","score":0.42899999022483826},{"id":"https://openalex.org/keywords/information-security-education","display_name":"information security education","score":0.6309999823570251},{"id":"https://openalex.org/keywords/australian-smes","display_name":"Australian SMEs","score":0.6230000257492065}],"concepts":[{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.7133728861808777},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.642558217048645},{"id":"https://openalex.org/C148976360","wikidata":"https://www.wikidata.org/wiki/Q1662500","display_name":"Information security management","level":5,"score":0.6285345554351807},{"id":"https://openalex.org/C56739046","wikidata":"https://www.wikidata.org/wiki/Q192060","display_name":"Knowledge management","level":1,"score":0.5759655833244324},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.523784339427948},{"id":"https://openalex.org/C48879800","wikidata":"https://www.wikidata.org/wiki/Q622439","display_name":"Small and medium-sized enterprises","level":2,"score":0.46578043699264526},{"id":"https://openalex.org/C505623098","wikidata":"https://www.wikidata.org/wiki/Q3002932","display_name":"Critical security studies","level":5,"score":0.41559749841690063},{"id":"https://openalex.org/C67674302","wikidata":"https://www.wikidata.org/wiki/Q730573","display_name":"Organizational culture","level":2,"score":0.4141963720321655},{"id":"https://openalex.org/C162853370","wikidata":"https://www.wikidata.org/wiki/Q39809","display_name":"Marketing","level":1,"score":0.37257498502731323},{"id":"https://openalex.org/C39549134","wikidata":"https://www.wikidata.org/wiki/Q133080","display_name":"Public relations","level":1,"score":0.3456451892852783},{"id":"https://openalex.org/C103377522","wikidata":"https://www.wikidata.org/wiki/Q3493999","display_name":"Security information and event management","level":4,"score":0.2027204930782318},{"id":"https://openalex.org/C184842701","wikidata":"https://www.wikidata.org/wiki/Q370563","display_name":"Cloud computing security","level":3,"score":0.1596485674381256},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.15808701515197754},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.13357317447662354},{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.11249884963035583},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.1022031307220459},{"id":"https://openalex.org/C151730666","wikidata":"https://www.wikidata.org/wiki/Q7205","display_name":"Paleontology","level":1,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C117110713","wikidata":"https://www.wikidata.org/wiki/Q3394676","display_name":"Network security policy","level":4,"score":0.0},{"id":"https://openalex.org/C10138342","wikidata":"https://www.wikidata.org/wiki/Q43015","display_name":"Finance","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.0}],"mesh":[],"locations_count":4,"locations":[{"id":"pmh:oai:aisel.aisnet.org:ecis2007-1076","doi":null,"is_oa":true,"landing_page_url":"http://aisel.aisnet.org/ecis2007/120","pdf_url":"http://aisel.aisnet.org/ecis2007/120","source":{"id":"https://openalex.org/S30879505","display_name":"Journal of the Association for Information Systems","issn_l":"1536-9323","issn":["1536-9323"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["abdc-a-star","anvur-scientific","cwts-core","dongbi-a","fnege-1","jufo-3","norway-2","poland-140","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310321080","host_organization_name":"Association for Information Systems","host_organization_lineage":["https://openalex.org/P4310321080"],"host_organization_lineage_names":["Association for Information Systems"],"type":"journal"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"ECIS 2007 Proceedings","raw_type":"text"},{"id":"pmh:oai:dro.deakin.edu.au:DU:30008152","doi":null,"is_oa":false,"landing_page_url":"http://aisel.aisnet.org/ecis2007/120/","pdf_url":null,"source":{"id":"https://openalex.org/S4306402457","display_name":"Deakin Research Online (Deakin University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I149704539","host_organization_name":"Deakin University","host_organization_lineage":["https://openalex.org/I149704539"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Conference Paper"},{"id":"pmh:oai:figshare.com:article/20556759","doi":null,"is_oa":false,"landing_page_url":"https://figshare.com/articles/conference_contribution/Fostering_information_security_culture_in_small_and_medium_size_enterprises_an_interpretive_study_in_Australia/20556759","pdf_url":null,"source":{"id":"https://openalex.org/S4377196282","display_name":"Figshare","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I4210132348","host_organization_name":"Figshare (United Kingdom)","host_organization_lineage":["https://openalex.org/I4210132348"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Conference contribution"},{"id":"mag:130727141","doi":null,"is_oa":false,"landing_page_url":"http://dro.deakin.edu.au/eserv/DU:30008152/warren-fosteringinformation-2007.pdf","pdf_url":null,"source":{"id":"https://openalex.org/S4306418324","display_name":"European Conference on Information Systems","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":"European Conference on Information Systems","raw_type":null}],"best_oa_location":{"id":"pmh:oai:aisel.aisnet.org:ecis2007-1076","doi":null,"is_oa":true,"landing_page_url":"http://aisel.aisnet.org/ecis2007/120","pdf_url":"http://aisel.aisnet.org/ecis2007/120","source":{"id":"https://openalex.org/S30879505","display_name":"Journal of the Association for Information Systems","issn_l":"1536-9323","issn":["1536-9323"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["abdc-a-star","anvur-scientific","cwts-core","dongbi-a","fnege-1","jufo-3","norway-2","poland-140","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310321080","host_organization_name":"Association for Information Systems","host_organization_lineage":["https://openalex.org/P4310321080"],"host_organization_lineage_names":["Association for Information Systems"],"type":"journal"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"ECIS 2007 Proceedings","raw_type":"text"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W130727141.pdf","grobid_xml":"https://content.openalex.org/works/W130727141.grobid-xml"},"referenced_works_count":26,"referenced_works":["https://openalex.org/W11013317","https://openalex.org/W42179619","https://openalex.org/W103807719","https://openalex.org/W1494928303","https://openalex.org/W1506043491","https://openalex.org/W1537544362","https://openalex.org/W1583442288","https://openalex.org/W1595738880","https://openalex.org/W1596109941","https://openalex.org/W1966669815","https://openalex.org/W1985044911","https://openalex.org/W2019551619","https://openalex.org/W2032545502","https://openalex.org/W2037069781","https://openalex.org/W2047547657","https://openalex.org/W2048584594","https://openalex.org/W2049561176","https://openalex.org/W2050232758","https://openalex.org/W2050276776","https://openalex.org/W2077197861","https://openalex.org/W2081683552","https://openalex.org/W2118087776","https://openalex.org/W2129085046","https://openalex.org/W2241728765","https://openalex.org/W2582377764","https://openalex.org/W2604094135"],"related_works":["https://openalex.org/W2243516156","https://openalex.org/W90235420","https://openalex.org/W122607271","https://openalex.org/W106125000","https://openalex.org/W7057311978","https://openalex.org/W29161281","https://openalex.org/W2245528381","https://openalex.org/W7095486467","https://openalex.org/W7057228976","https://openalex.org/W3200793829"],"abstract_inverted_index":{"By":[0],"having":[1],"an":[2,55,77],"effective":[3],"organisational":[4],"information":[5,13,23,78,113,146,158,161,178],"security":[6,79,114,147,179],"culture":[7,35,80],"where":[8],"employees":[9],"intuitively":[10],"protect":[11],"corporate":[12],"assets,":[14],"small":[15],"and":[16,38,50,67,122,148,160,168,174,184,189],"medium":[17],"size":[18],"enterprises":[19],"(SMEs)":[20],"could":[21],"improve":[22],"security.However,":[24],"previous":[25],"research":[26],"has":[27],"largely":[28],"overlooked":[29],"the":[30,39,153,166],"development":[31],"of":[32,119,157,170],"such":[33,97],"a":[34,61,84,98,142,172],"for":[36,75,92,112,187],"SMEs,":[37],"national":[40,85,128],"context":[41],"in":[42,81,83],"which":[43],"SMEs":[44,82,93],"operate.The":[45],"paper":[46,87,132,163],"explores":[47],"this":[48],"topic":[49],"provides":[51],"key":[52,89],"findings":[53,101],"from":[54,140],"interpretive":[56],"Australian":[57,104,135],"study":[58],"based":[59],"on":[60],"literature":[62],"review,":[63],"two":[64],"focus":[65],"groups":[66],"three":[68],"case":[69],"studies.A":[70],"holistic":[71],"framework":[72],"is":[73],"provided":[74],"fostering":[76],"setting.The":[86],"discusses":[88],"managerial":[90,185],"challenges":[91],"attempting":[94],"to":[95,116,130,145,177,180],"develop":[96],"culture.The":[99],"main":[100],"suggest":[102],"that":[103,134],"SME":[105,136],"owners":[106,137],"do":[107],"not":[108],"provide":[109],"sufficient":[110],"support":[111],"due":[115],"insufficient":[117],"awareness":[118],"its":[120],"importance":[121],"may":[123,138],"also":[124,164],"be":[125,150],"affected":[126],"by":[127],"attitudes":[129],"risk.The":[131],"concludes":[133],"benefit":[139],"adopting":[141],"risk-based":[143],"approach":[144,176],"should":[149],"educated":[151],"about":[152],"potential":[154],"strategic":[155],"role":[156],"technology":[159],"security.The":[162],"identifies":[165],"value":[167],"difficulty":[169],"promoting":[171],"behavioural":[173],"learning":[175],"complement":[181],"traditional":[182],"technological":[183],"approaches.Implications":[186],"theory":[188],"practice":[190],"are":[191],"discussed.":[192]},"counts_by_year":[{"year":2021,"cited_by_count":3},{"year":2020,"cited_by_count":3},{"year":2019,"cited_by_count":6},{"year":2018,"cited_by_count":3},{"year":2017,"cited_by_count":6},{"year":2016,"cited_by_count":3},{"year":2015,"cited_by_count":6},{"year":2014,"cited_by_count":9},{"year":2013,"cited_by_count":3},{"year":2012,"cited_by_count":5}],"updated_date":"2026-10-01T08:54:57.152042","created_date":"2016-06-24T00:00:00"}