Key drivers of information security culture: A survey and exploratory factor analysis in an energy retail organization
Lopullinen julkaistu versio - 1.6 MB
Suorsa, M., Helo, P., & Petman, J. (2026). Key drivers of information security culture: A survey and exploratory factor analysis in an energy retail organization. Information Security Journal: A Global Perspective. https://doi.org/10.1080/19393555.2026.2690536
© 2026 The Author(s). Published with license by Taylor & Francis Group, LLC. This is an Open Access article distributed under the terms of the Creative Commons Attribution License (http://creativecommons.org/licenses/by/4.0/), which permits unrestricted use, distribution, and reproduction in any medium, provided the original work is properly cited. The terms on which this article has been published allow the posting of the Accepted Manuscript in a repository by the author(s) or with their consent.
Lataukset19
Pysyvä osoite
Kuvaus
The energy retail sector is foundational to the energy industry value chain, making the strengthening of its information security culture an organizational necessity. This study examines the factors that influence information security culture in European energy retail businesses, based on a survey developed from insights gained through a narrative literature review and conducted within an energy retail organization. A total of 610 employees completed the survey, resulting in a 29% response rate, and an Exploratory Factor Analysis (EFA) was subsequently performed to identify the underlying key drivers of information security culture. These include: (1) Management engagement in information security, (2) Inclusion of information security in formal performance appraisal and (3) Assignment of responsibility for information security reporting. Theoretically, this study contributes to the field of IT Governance, Risk Management, and Compliance (IT-GRC) within the critical energy sector, while its findings provide a practical executive summary for strengthening information security culture strategies within energy retail organizations.
Emojulkaisu
ISBN
ISSN
1939-3547
1939-3555
1939-3555
Aihealue
Kausijulkaisu
Information security journal : a global perspective
OKM-julkaisutyyppi
A1 Alkuperäisartikkeli tieteellisessä aikakauslehdessä (vertaisarvioitu)