Exploring the Reasons behind the Low ISO 27001 Adoption in Public Organizations in Saudi Arabia

Author

Alshitri, Khalid I. ; Abanumy, Abdulmohsen N.

Author_Institution

Nat. Satellite Technol. Center (NSTC), King Abdulaziz City for Sci. & Technol. (KACST), Riyadh, Saudi Arabia

fYear

2014

fDate

6-9 May 2014

Firstpage

1

Lastpage

4

Abstract

The main purpose of this paper is to investigate the reason behind the low adoption of the ISO 27001 standard in the public organizations in Saudi Arabia. Human resource management issues such as shortage of information security expertise, lack of training, education, and awareness programs, and high salary demand for security professionals were found to be the most significant barriers to the successful implementation of ISO 27001 in public organizations in Saudi Arabia. Implications for public organizations management and future research are discussed at the end of this paper.

Keywords

ISO standards; human resource management; organisational aspects; salaries; security of data; ISO 27001 standard adoption; Saudi Arabia; high salary demand; human resource management issues; information security expertise shortage; public organization management; security professionals; Human resource management; ISO standards; Information security; Organizations; Standards organizations; Total quality management;

fLanguage

English

Publisher

ieee

Conference_Titel

Information Science and Applications (ICISA), 2014 International Conference on

Conference_Location

Seoul

Print_ISBN

978-1-4799-4443-9

Type

conf

DOI

10.1109/ICISA.2014.6847396

Filename

6847396