FRAMEWORK OF THE RELATIONSHIP BETWEEN OC AND ISC
Information security culture continues to grow in importance as more and more organizations rely on interconnectivity
and information to gain competitiveness in this dynamic environment. Therefore, organizations need an ISC to guide the
actions and behaviours of employees in protecting organizations’ information. The understanding from literature and the
cultural views by Fitzgerald (2007) constitutes three natures of relationships between OC and ISC as depicted in Table 2.
They can be considered in continuum ranging from ISC not part of OC to ISC embedded completely into OC as depicted
in Figure 1 below: