Please use this identifier to cite or link to this item: http://bura.brunel.ac.uk/handle/2438/24601
Title: The Influence of Inputs in the Information Security Policy Development: An Institutional Perspective
Authors: Ording, LG
Gao, S
Chen, W
Keywords: information security policy development;information security;inputs;institutional theory;social-organisational perspective
Issue Date: 6-Jun-2022
Publisher: Emerald
Citation: Ording, L.G., Gao, S. and Chen, W. (2022) 'The Influence of Inputs in the Information Security Policy Development: An Institutional Perspective', Transforming Government: People, Process and Policy, 16 (4), pp. 418-435 (18). doi: 10.1108/TG-03-2022-0030.
Abstract: Copyright © 2022, Lovisa Göransson Ording, Shang Gao and Weifeng Chen. Purpose: The purpose of this paper is to investigate what role literature-based inputs have on the information security policy (ISP) development in practice. Design/methodology/approach: A literature review is carried out to identify commonly used inputs for ISP development in theory firstly. Secondly, through the lens of institutional theory, an interpretive approach is adapted to study the influence of literature-based inputs in the ISP development in practice. Semi-structured interviews with senior experienced information security officers and managers from the public sector in Sweden are carried out for this research. Findings: According to the literature review, 10 inputs for ISP development have been identified. The results from the interviews indicate that the role inputs have on the ISP development serves as more than a rational tool, where organisational context, institutional pressures and the search for legitimacy play an important role. Research limitations/implications: From the institutional perspective, this study signifies the influence of inputs on ISP development can be derived from institutionalised rules or practices established by higher authorities; actions and practices that are perceived as successful and often used by other organisations; the beliefs of what is viewed as appropriate to meet the specific pressures from stakeholders. Practical implications: This research recommends five practical implications for practitioners working with the ISP development. These recommendations aim to create an understanding of how an ISP could be developed, considering more than the rational functionalist perspective. Originality/value: To the best of the authors’ knowledge, it is the first of its kind in examining the role of literature-based inputs in ISP development in practice through the lens of institutional theory.
URI: https://bura.brunel.ac.uk/handle/2438/24601
DOI: https://doi.org/10.1108/TG-03-2022-0030
ISSN: 1750-6166
Appears in Collections:Brunel Business School Research Papers

Files in This Item:
File Description SizeFormat 
FullText.pdfCopyright © 2022, Lovisa Göransson Ording, Shang Gao and Weifeng Chen. License: Published by Emerald Publishing Limited. This article is published under the Creative Commons Attribution (CC BY 4.0) licence. Anyone may reproduce, distribute, translate and create derivative works of this article (for both commercial and non-commercial purposes), subject to full attribution to the original publication and authors. The full terms of this licence may be seen at https://creativecommons.org/licences/by/4.0/legalcode427.05 kBAdobe PDFView/Open


This item is licensed under a Creative Commons License Creative Commons