Spreading information security

Spreading information security

It’s the one bug you do want to catch: new research has found a culture of security in an organisation can be contagious.

Researchers from RMIT Vietnam found staff who already have a high awareness of information security can play a crucial role in elevating the organisation’s Information Security (InfoSec) culture, simply through social influence.

The research suggests workplace culture plays an important part in protecting an organisation’s data, alongside more technical strategies. 

RMIT Vietnam Lecturer Dr Duy Dang-Pham led the project alongside senior researchers Professor Karlheinz Kautz, Dr Siddhi Pittayachawan and Dr Vince Bruno from the School of Business IT and Logistics at RMIT in Melbourne.

Professor Karlheinz Kautz (left), Dr Duy Dang-Pham (centre) and Dr Siddhi Pittayachawan (right) worked with an industry partner on the research project.

The project investigated the creation of an InfoSec climate inside a large Vietnamese company and analysed the perception of security issues among the employees as well as their social relationships and socialising patterns, such as advice sharing.

This allowed the research group to track and chart the changes in perception and socialising patterns over a three-month period.

“We’ve found that employees increase their information security awareness as a result of increased socialising with colleagues who have a high awareness of InfoSec issues,” said Duy.

“In other words, information security is contagious.”

The project started with internal training on information security issues and identifying the key influencers in the InfoSec culture within the workplace.

These influencers were staff members at different levels and in different roles, but who were all informally providing information security advice across the network.

As part of the project, the research group also took part in the design and implementation of structural changes to improve InfoSec awareness among company staff.

“The partnership between the academics and the organisation allowed for a practical research project with immediate impact,” Duy said.

The study ‘Explaining the Development of Information Security Climate and an Information Security Support Network: A Longitudinal Social Network Analysis’ has been published in the Australasian Journal of Information Systems.


Story: Matt Kelly and Jasmijn van Houten


  • Research
  • RMIT Vietnam
  • Society
  • Business
  • Industry
  • Future World of Work

Related News

Rising through world academic rankings

RMIT has continued to rise as a global leader, climbing 16 places in the 2019 Academic Ranking of World Universities (ARWU).

Five top stories: putting the spotlight on science

From brainy bees to tech that can create memories in a flash, these are some of our biggest science stories this year so far.

Visiting homelessness expert on what Australia can learn from Wales

Australia could benefit from a policy lead approach to reducing homelessness, a model which has been successful in Wales, says visiting expert Dr Peter Mackie.

Culture, speed and failure the keys to embracing open innovation

In a world of rapid innovation, how can Australian businesses draw on global expertise to grow and compete? A panel of industry experts discuss the keys to successful collaboration.

Subscribe to RMIT NewsSubscribe
Flag Image One Flag Image Two

Acknowledgement of Country

RMIT University acknowledges the people of the Woi wurrung and Boon wurrung language groups of the eastern Kulin Nation on whose unceded lands we conduct the business of the University. RMIT University respectfully acknowledges their Ancestors and Elders, past and present. RMIT also acknowledges the Traditional Custodians and their Ancestors of the lands and waters across Australia where we conduct our business.

More information