Addressing cultural dissimilarity in the information security management outsourcing relationship

  • Authors:
  • Aggeliki Tsohou;Marianthi Theoharidou;Spyros Kokolakis;Dimitris Gritzalis

  • Affiliations:
  • Dept. of Information and Communication Systems Engineering, University of the Aegean, Karlovassi, Greece;Dept. of Informatics, Athens University of Economics and Business, Athens, Greece;Dept. of Information and Communication Systems Engineering, University of the Aegean, Karlovassi, Greece;Dept. of Informatics, Athens University of Economics and Business, Athens, Greece

  • Venue:
  • TrustBus'07 Proceedings of the 4th international conference on Trust, Privacy and Security in Digital Business
  • Year:
  • 2007

Quantified Score

Hi-index 0.00

Visualization

Abstract

Organizational culture influences the way a) information security is perceived, b) security countermeasures are adopted, and c) the organization reacts to the cultural changes of a new security program. In Information Security Management Outsourcing (ISMO), cultural differences may arise between the organization and the provider, for example conflict between the countermeasures applied by the provider and the company's internal policies. We propose a conceptual framework of security mechanisms in order organizations that choose ISMO to identify and manage cultural dissimilarity.