Information Security Culture Assessment: Case Study

The weakest link in an Organisation's Information Security is often related to the Employee's interaction with information resources. Researchers have called for embedding the Information Security Culture within an organisation strategy. The United Arab Emirates leads the Arab world in the development of it's e-Government strategy. Whilst the UAE initiative have made considerable progress towards a state-of-the-art e-Government implementation, it is essential to assess the security culture within organisations. In this paper the results of a questionnaire conducted on four sectors of the UAE e-Government is presented. The analysis show that in order to achieve the highest standards of Information Security there are some areas where action needs to be taken in, these are highlighted and some suggestions for improvement are presented.