An Analysis of Literature Review about Information Security Culture: Setting a Direction for Future Study

Along with the advent of convergence era beyond information-oriented age, information security is no longer considered as technical issues. It needs converged and integrated approach including personal behaviors. For this reason, proper information security culture is emphasized. Therefore, information security culture researches have actively been in progress. In this research, recent studies about information security culture were analyzed to figure out a trends of information security culture. In addition, a direction of future study was proposed. Literature studies from the organization perspective were represented as a major field in information security culture researches. On the other hand, studies about empirical research from the personal perspective are deficient. As a direction for future study, empirical research from the personal behavior was proposed because personal behavior is an essential part of information security culture.