Conceptualizing and Validating Information Security Culture as a Multidimensional Second-Order Formative Construct

• Main Authors: Nasir, Akhyari, Ruzaini, Abdullah Arshah, Mohd Rashid, Ab Hamid
• Format: Conference or Workshop Item
• Language: English
• Published: IARIA 2018
• Subjects: QA75 Electronic computers. Computer science
• Online Access: http://umpir.ump.edu.my/id/eprint/22039/1/Conceptualizing%20and%20Validating%20Information%20Security%20Culture.pdf; http://umpir.ump.edu.my/id/eprint/22039/; http://www.thinkmind.org/index.php?view=article&articleid=iccgi_2018_1_10_10004
• Institution: Universiti Malaysia Pahang

This paper discusses a pilot study on conceptualization and validation of Information Security Culture (ISC) as a multidimensional second-order formative construct. The concept was developed in our previous works, and is based on widely accepted concepts of Organizational Culture and ISC. The model is validated using samples from employees of one Malaysia Public University. The Partial Least Squares Approach to Structural Equation Modeling (PLSSEM) using Smart-PLS software was used to model and analyse the data. The ISC construct was treated as reflective formative second-order construct and analysed using the latest approach in PLS-SEM. The findings empirically support the conceptualization and validation of ISC as a reflective formative second-order construct with all seven dimensions being significant in contributing to the underlying concept of ISC. The study contributes to the ISC literature by providing new insights on the conceptualization, operationalization and validation of ISC the concept based on widely accepted concepts and approaches.