Social Aspects of Information Security in Work Communities

Information security ensures the continuity of operations in a digitalized society. Securing entities like critical infrastructure requires seamless cooperation of people, well-planned processes, and protective technologies. This proposal tackles the social aspects of information security practices within organizations to gain insights into how colleagues can improve or impede responses to information security requirements or incidents. Information security research usually focuses on the organizational or individual levels. The social aspects of information security have been recognized, but their study, significantly beyond intention to the actual practice, requires robust theoretical approaches and research methods. The interdisciplinary approach of this proposal seeks to bring new insights to information security research from social sciences to produce theoretical and methodological ideas that support more effective information security management and resilience.