This study argues that the effect of perceived organizational culture on the formation of security-related subjective norms and the level of compliance pressure will vary based on how the employees perceive their organization’s cultural values. These perceptions reflect on the assumptions and principles that organizations use to guide their security-related behaviors. To make these arguments, we adopt the competing values model (CVM), which is a model used to understand the range of organizational values and resulting cultural archetypes.
Copyright © 2020, Emerald Insight.
The definitive version is available at: Information Technology & People.
Kam, Hwee-Joo, Thomas Mattson, and Dan J. Kim. “The ‘Right’ Recipes for Security Culture: A Competing Values Model Perspective.” Information Technology & People Online First (September 18, 2020). https://doi.org/10.1108/ITP-08-2019-0438.