The effectiveness of corporate culture toward information security incidents

In today's world, ensuring the security of personally identifiable information is becoming more of a challenge. Many organizations protect their information assets by focusing on security breaches and increasing their expenses for security technologies; however, it is impossible to eliminate incidents and accidents simply by applying security technologies. This paper aims to identify the causes of information leaks by applying the organization theory and the statistical analysis method to assess the impact of corporate culture on information security incidents. Furthermore, the relationship between organizational objectives and social values is discussed in order to propose assessment process for corporate culture.