5. CONCLUSION AND FUTURE RESEARCH
This paper reviews the current research in
information systems security governance from a
behavioral perspective. The findings of this paper
informs research by identifying the range of
emergent issues and listing various theories being
used in behavioral domain of security governance
research. The paper also highlights the need for
better security management techniques for
“formally managing the informal” aspects of
information systems security. A theoretical
framework appropriate for behavioral information
systems security governance is suggested. The
proposed framework, borrowed from the discipline
of sociology, is arguably a conceptual fit to study
the values and behavior of individuals in a group
setting. A Study of underlying factors of deviant
behavior of individuals is potentially useful for
better security governance practices.
Contributions to existing security governance
literature are theoretical as well as practical. This