Improving Information Security Management in Nonprofit Organisations with Action

Abstract

Information security is vital for protecting important assets of organisations, including the information resources and the organisation’s reputation. In Australia, the nonprofit sector makes a significant contribution to society but is under represented in the information security literature. This paper describes research in progress that is investigating and improving information security management in some nonprofit organisations (NPOs), which incorporates a participatory action research methodology. This approach will enhance the skill set likely to be present in Australian nonprofit organisations, producing a more sustainable solution, as well as contributing to the open literature. The Technology Acceptance Model will be utilised as a referent model to aid data analysis. This research will directly benefit the nonprofit sector by highlighting the importance and relevance of effective information security management in their organisations. It will inform the policy making process of government actors when devising policy to assist NPOs.