Enhancing cyber security behavior: an internal social marketing approach

Abstract

Purpose Understanding the behavioral change process of system users to adopt safe security practices is important to the success of an organization’s cybersecurity program. This study aims to explore how the 7Ps (product, price, promotion, place, physical evidence, process and people) marketing mix, as part of an internal social marketing approach, can be used to gain an understanding of employees’ interactions within an organization’s cybersecurity environment. This understanding could inform the design of servicescapes and behavioral infrastructure to promote and maintain cybersecurity compliance. Design/methodology/approach This study adopted an inductive qualitative approach using in-depth interviews with employees in several Vietnamese organizations. Discussions were centered on employee experiences and their perceptions of cybersecurity initiatives, as well as the impact of initiatives on compliance behavior. Responses were then categorized under the 7Ps marketing mix framework. Findings The study shows that assessing a cybersecurity program using the 7P mix enables the systematic capture of users’ security compliance and acceptance of IT systems. Additionally, understanding the interactions between system elements permits the design of behavioral infrastructure to enhance security efforts. Results also show that user engagement is essential in developing secure systems. User engagement requires developing shared objectives, localized communications, co-designing of efficient processes and understanding the “pain points” of security compliance. The knowledge developed from this research provides a framework for those managing cybersecurity systems and enables the design human-centered systems conducive to compliance. Originality/value The study is one of the first to use a cross-disciplinary social marketing approach to examine how employees experience and comply with security initiatives. Previous studies have mostly focused on determinants of compliance behavior without providing a clear platform for management action. Internal social marketing using 7Ps provides a simple but innovative approach to reexamine existing compliance approaches. Findings from the study could leverage proven successful marketing techniques to promote security compliance.

Privacy Champions in Software Teams: Understanding Their Motivations, Strategies, and Challenges

“…Security Champions in development teams have an interest in security but they are not necessarily security experts or have a formal Security Champion title [33,57,68,70,72,79]. They can positively infuence the security practices of others [19][20][21] often with a bottom-up approach instead of a top-down approach [8,19,55]. Such behaviours and attitudes are valuable in organisations that prioritise security [35].…”

Environmental management and social marketing: a bibliometric analysis

“…Due to the growing popularity of the Internet in society, a particular category of research is the work of scientists devoted to the application of the concept of social marketing in the electronic environment [35][36][37][38]. Pham H.C., Brennan L., Parker L, et al [39] argue that a comprehensive study of changes in the behavior of users of the World Wide Web is an indispensable condition for cybersecurity. They pay attention to the study of 7P as an element of internal social marketing, which one can use to study the internal environment of the business entity to build a cybersecurity system in the future.…”

Do desire, anxiety and personal innovativeness impact the adoption of IoT devices?

“…Cyber security is an area of interest for not only researchers in the area of Computer Science or Information Systems but also for those in consumer behavior or marketing (Johnson et al , 2020; Pham et al , 2020). Given its multidisciplinary relevance, the adoption of IoT assistive devices must be examined from different perspectives.…”