A Model for Information Security Culture with Innovation and Creativity as Enablers

Abstract

This research aims to elicit a conceptual understanding of creativity and innovation to enable a totally aligned information security culture. Stimulating the creativity and innovation of employees in an organisation can help to solve information security problems and to create a culture where information security issues are addressed and resolved, as opposed to being introduced by end-users. The study applied a theoretical approach with a scoping literature review using the PRISMA method to derive traits and programmes that organisations can implement to stimulate creativity and innovation as part of the organisational culture. A model for engendering employee creativity and innovation as part of the information security culture is proposed, through the lens of the three levels of organisational culture. This study both offers novel insights for managerial practice and serves as a point of reference for further academic research about the influence of creativity and innovation in information security culture.

A model for information security culture with creativity and innovation as enablers – refined with an expert panel

“…The research methodology followed a phased approach, as illustrated in Figure 1, whereby phase one comprised of a scoping literature review that was conducted using the preferred reporting items for systematic reviews and meta-analyses (PRISMA) method to develop the conceptual model, which was published as part of the conceptual study (Da Veiga, 2022) and is presented in Figure 2. This was followed by Phase 2 to validate and refine the conceptual model with an expert panel using semi-structured interviews and qualitative data analysis as part of the research method.…”

“…The conceptual information security culture model, enabled through creativity and innovation, is depicted in Figure 2. The concepts applied in the model were derived from the literature review summary in Table 2, grouped according to either organisational traits or programmes that the organisation can implement to stimulate creativity and innovation as presented in Da Veiga (2022).…”