Information Security Culture: Fusion of Professional and Personal Lives

Abstract

This annotated bibliography explores the core values organizations must possess in order to implement information security cultures that incorporate information security awareness and develop information security behaviors while maximizing productivity and reducing the number of security incidents created from end users. The bibliography is based on literature published from 2005 to 2015. Conclusions drawn from the literature describe the different corporate culture frameworks and training methodologies needed to cultivate an information security culture.