Understanding the Information Security Awareness Process in Real Estate Organizations Using the Seci Model

Abstract

Information security awareness plays a key role in organizations using information systems for their business operations. Recent trends have indicated that not only critical infrastructure sectors but also organizations such as retail services are targeted by criminals as long as there is data of interest and the level of information security (and awareness) is relatively low. One such example concerns real estate organizations where they process their customers’ personal and sensitive information. In this study, we applied Nonaka’s Socialization, Externalization, Internalization, and Combination (SECI) model as the theoretical lens to understand how real estate business employees gain awareness and understanding of information security. Data collected from 105 real estate organizations is tested using the structural equation modelling approach. The results indicate Socialization, Internalization and Combination were found to support the development of information security awareness among employees while data analysis does not support Externalization.

Keywords: Information security awareness, Information security policies, Real estate organizations, SECI model

JEL Classification: C88, C89, K42, K49