Factors Shaping Information Security Culture in an Internal IT Department

Abstract

Listen

Translate article

Companies are exposed to the risk of falling victim to cyber attacks every day and therefore invest in optimizing their information security (IS) level. In addition to technological investments, the focus is now increasingly on employees, as their attitude and behavior has a significant influence on the IS level of a company. There is already extensive research on the influencing factors and the establishment of an IS culture in companies. However, little attention has been paid to the group of IT employees, although it has been proven that their attitude, behavior and judgment regarding cyber attacks and IS in general differ from non-IT employees. Even within an IT department, one can expect to see different degrees of these factors, as a distinction must be made between IS employees and employees with traditional IT functions (software development, server operation, etc.).