A model of factors influencing information security culture in oil and gas company

Abstract

This research first identifies the factors that influence information security culture in private sector, specifically in one oil and gas company, followed by proposing a Factors Influence Information Security Culture Model. This research implemented quantitative methodology whereby an online questionnaire was distributed all employees in this company. All level respondent is included, from managerial level to non-executive staff. From the literature review it has been found that nine factors influence information security culture, however only five factors selected and tested in this research. Five factors are; top management support, security policy enforcement, security behaviour, security training and security awareness. These factors are tested on result of the survey of 70 respondents, five factors that influence information security culture is determined.