Developing a cyber security culture: Current practices and future needs

While the creation of a strong security culture has been researched and discussed for decades, it continues to elude many businesses. Part challenge faced is distilling pertinent, recent academic findings research into useful guidance. In this article, we aim tackle issue by conducting state-of-the-art study organisational cyber research. This work investigates four questions, including how defined, what factors are essential building maintaining such culture, frameworks proposed cultivate metrics suggested assess it. Through application PRISMA systematic literature review technique, identify analyse 58 articles from last 10 years (2010-2020). Our demonstrate that while there have notable changes in use terms (e.g., information culture), most influential similar. Top management support, policy procedures, awareness instance, critical engendering culture. Many reviewed revealed common foundations, with playing substantial role crafting appropriate models. Questionnaires surveys used tool measure but also concerns as whether more dynamic measures needed. For practitioners, article highlights models robust research, produce an up-to-date characterisation field define open issues deserving further attention change processes national enterprise's