Ashenden, D;
Sasse, A;
(2013)
CISOs and organisational culture: Their own worst enemy?
Computers & Security
, 39
(B)
396 - 405.
10.1016/j.cose.2013.09.004.
![]() |
Text
Ashenden_and_Sasse_-_2013_-_CISOs_and_organisational_culture_Their_own_worst_-postprint.pdf Download (208kB) |
Abstract
Many large organisations now have a Chief Information Security Officer (CISO1). While it may seem obvious that their role is to define and deliver organisational security goals, there has been little discussion on what makes a CISO able to deliver this effectively. In this paper, we report the results from 5 in-depth interviews with CISOs, which were analysed using organisational behaviour theory. The results show that the CISOs struggle to gain credibility within their organisation due to: a perceived lack of power, confusion about their role identity, and their inability to engage effectively with employees. We conclude that as the CISO role continues to develop CISOs need to reflect on effective ways of achieving credibility in their organisations and, in particular, to work on communicating with employees and engaging them in security initiatives. We also identify a key responsibility for effective CISOs; that is to remove the blockages that prevent information security from becoming ‘business as usual’ rather than a specialist function. For researchers, our findings offer a new piece of the emerging picture of human factors in information security initiatives.
Type: | Article |
---|---|
Title: | CISOs and organisational culture: Their own worst enemy? |
Open access status: | An open access version is available from UCL Discovery |
DOI: | 10.1016/j.cose.2013.09.004 |
Publisher version: | http://dx.doi.org/10.1016/j.cose.2013.09.004 |
Language: | English |
Keywords: | Security awareness, Human factors, Information security management, Organisational culture, Discourse analysis |
UCL classification: | UCL UCL > Provost and Vice Provost Offices > UCL BEAMS UCL > Provost and Vice Provost Offices > UCL BEAMS > Faculty of Engineering Science UCL > Provost and Vice Provost Offices > UCL BEAMS > Faculty of Engineering Science > Dept of Computer Science |
URI: | https://discovery-pp.ucl.ac.uk/id/eprint/1417350 |
Archive Staff Only
![]() |
View Item |