Information Security Policy And Compliance In Oil And Gas Organizations-A Pilot Study
Rao Faizan Ali, P.D.D. Dominic, Prakash Kumar Karunakaran · Solid State Technology · 2020
Purpose- Oil and gas organizations considered as the backbone of every country’s economy. Informationsecurity attacks on these organizations have been increased rapidly in the last decade. Oil and gasorganizations often invest in technical solutions to mitigate information security risks. Whereas, mostinformation security attacks occur due to internal employees’ negligence towards information securitypolicy. This paper based on the pilot study to analyze appropriate information security governance andsocial bonding effects on oil and gas organizations employee’s behavior towards information security policycompliance.Research methodology- This paper is survey-based research, and a self-administered questionnaire was usedfor data collection. Survey items were adapted from different authentic studies. All items were measuredthrough a 1 to 5 Likert-scale from 1 strongly disagree to 5 strongly agree. The survey was conducted in anoil refinery’s IT department.Findings- This research indicates that appropriate information security governance and information securityawareness improves social bonding, and good social bonding between employees can enhance informationsecurity policy compliance in oil and gas organizations.Conclusion- Oil and gas organizations must invest in employee’s education and training regardinginformation security. Moreover, the alignment of security policies and procedures are needed in oil and gasorganizations. Our paper shows that information security policy compliance can be improved with theeffectiveness of governance towards security education training and awareness, security policy andprocedures, physical security monitoring, and risk assessment and analysis.