Internalisation of information security culture amongst employees through basic security knowledge

Abstract

This paper discusses the concept of basic security knowledge. This concept is about organisational members possessing basic security knowledge that can be applied to perform security tasks in their daily work routine. The intention of this paper is not to attempt an exhaustive literature review, but to understand the concept of basic security knowledge that can be used to cultivate a culture of information security in an organisation. The first part highlights some of the basic ideas on knowledge. The second part interprets the concept of basic security knowledge in the case study. Finally, a synthesised perspective of this concept is presented. © 2006 International Federation for Information Processing.