Abstract

ABSTRACT This study presents a literature review of the Information Systems (IS) security field. The purpose of this review is to identify IS 'security themes'. Articulating IS 'security themes' can assist in making effective decisions and reducing risks faced by organisations. This review analyses 87 journal articles from the AIS Senior Scholars' Basket of Journals, and journals recommended by the AIS Special Interest Group in Information Security and Privacy (SIGSEC). An inductive approach to open coding was followed which led to the emergence of twelve IS 'security themes'. Based on our analysis, we found significant research focus on certain 'security themes' (e.g. IS Security Policy, IS Security Behaviour, IS Security Management, and IS Security Awareness) over others (e.g. IS Security Knowledge, IS Security Ethics, and IS Security Investment). We also examine the role of Security Education, Training, and Awareness (SETA) programmes across the IS 'security themes' and provide some initial observations.

Full Text
Published version (Free)

Talk to us

Join us for a 30 min session where you can share your feedback and ask us any queries you have

Schedule a call