18
The 7 dimensions of security culture
managers, resulting in low representation from
the end-user community
36
. However, because we
measure the security culture of every employee in an
organization (and perform analysis on how each of
the dimensions of security culture influences end user
behavior in different organizational contexts), CLTRe
plays an important role in putting empirical research
of end-user behaviors, identification of their factors,
and security culture in general at a higher level.
Data obtained by measuring each dimension of
security culture allows for direct comparisons of
the influence of individual dimensions of security
culture. Our studies show that end-user behavior
is empirically dependent on the dimensions of
security culture. We can compare the strength of the
influence of knowledge and awareness on employee
behavior with the influence of norms, attitudes,
communication processes, roles/responsibilities and
compliance and make predictions on this basis.
In particular, using predictive statistics we identified
significant influences of perceptions of organizational
norms on employee behavior. What is perceived
as normal behavior in social settings has a strong
influence on what is considered acceptable behavior
in an organization and what is not, independent of
what the rules or formal policies dictate.
