Developing a theory-based information security management framework for human service organizations

Abstract

Purpose

This paper aims to identify organizations’ information security issues and to explore dynamic, organizational culture and contingency theories to develop an implementable framework for information security systems in human service organizations (HSOs) based soundly in theory and practice.

Design/methodology/approach

The paper includes a critical review of global information security management issues for HSOs and relevant multi-disciplinary organizational theories to address them.

Findings

Effective information security management can be particularly challenging to HSO because of their use of volunteer staff in a borderless electronic environment. Organizations’ lack of recognition of the need for staff awareness of information security threats and for training in secure work practices, particularly in terms of maintaining clients’ privacy and confidentiality, is a major issue. The dynamic theory of organizational knowledge creation, organizational culture theory and contingency theory were identified as the most suitable theoretical perspectives to address this issue and underpin an effective information security management framework for HSOs.

Research limitations/implications

The theory-based framework presented here has not been tested in practice. Such testing will be carried out in further research.

Originality/value

Currently, there is no framework for information security systems in HSOs. The framework developed here provides a foundation on which HSO can build information security systems specific to their needs.

Citation

Mubarak, S. (2016), "Developing a theory-based information security management framework for human service organizations", Journal of Information, Communication and Ethics in Society, Vol. 14 No. 3, pp. 254-271. https://doi.org/10.1108/JICES-06-2015-0018