Information security governance implementation within the mobile device environment

Organisational information has been acknowledged to be a valuable asset which must be protected no matter where it is accessed from or how it is accessed. Mobile devices such as smartphones and tablets are becoming a popular means of accessing the organisation's information whether it is on a company-owned or personal mobile device. This has led to an increased awareness of potential risks to the organisation within the mobile device environment which requires organisations to be more vigilant with regards to information security governance. The objective of the research was, therefore, to investigate how organisations go about implementing information security governance within the mobile device environment. The research was conducted at a Retail company where two mobile device implementations took place. The research philosophy was interpretive and the research strategy employed was a grounded case study which allowed theory to be developed using a combination of the grounded theory methodology and the case study method. The use of a mixed approach, deductive and inductive, allowed a conceptual framework to be developed from literature which was used as a sensitising device to start the data collection and analysis process. Qualitative data was collected from multiple sources such as semi-structured interviews and company documents.

Grantor dc:publisher.institution

Department of Information Systems

Year dc:date.issued

2014

Author dc:creator

• Phillips, Celeste

Advisor dc:contributor.advisor

• Brown, Irwin

Language dc:language.iso

eng

Handle dc:identifier.uri

http://hdl.handle.net/11427/8502

OAI identifier oai:identifier

oai:open.uct.ac.za:11427/8502