User Behaviour with Organisational Information Security Policies

Information security policy compliance is one of the main challenges facing organizations today. Although implementing technical and procedural measures clearly helps to improve an organization's IS, the human factor or the employees ' compliance with these measures is the real key to success. Many organisations have a policy … 70 % of organizations indicated that IS policies were owned at the highest organizational level (E&Y, 2013) 57 % of organizations considered employees the most likely source of a threat (PwC, 2014) … but complying with it remains a challenge 38 % viewing careless or unaware employees as the most likely threat (E&Y, 2013) 70 % of organizations where security policy was poorly understood had staff-related breaches (PwC, 2014) Security awareness has delivery limitations e.g.: • One size fits all • Lack of organization • No explanation of why • Often considered as spa