Systems research methods and approaches at CIAT—current and planned involvement

The purpose of this chapter is to provide the researcher, who already is inclined to apply qualitative research, with an overview of methods. A representative sample of qualitative research methods is presented, which may be employed when conducting information systems research. These methods include Action Research, Case Study, Ethnography, Grounded Theory, and Narrative Inquiry. Examples of these research methods are also included, which provide a description of the method and references to more detailed presentations. Researchers should thoroughly explore these methods and become fully cognizant of when to appropriately apply each method. It is important to ensure that the chosen method addresses the research questions and supports the research objectives.

Download Full-text

Information Systems Research Methods, Epistemology, and Applications

10.4018/978-1-60566-040-0 ◽

2009 ◽

Cited By ~ 3

Keyword(s):

Information Systems ◽

Research Methods ◽

Systems Research ◽

Information Systems Research

Download Full-text

Information security culture – state-of-the-art review between 2000 and 2013

Information and Computer Security ◽

10.1108/ics-05-2014-0033 ◽

2015 ◽

Vol 23 (3) ◽

pp. 246-285 ◽

Cited By ~ 27

Author(s):

Fredrik Karlsson ◽

Joachim Åström ◽

Martin Karlsson

Keyword(s):

Information Security ◽

Research Methods ◽

State Of The Art ◽

Assessment Tools ◽

Future Research ◽

Research Topics ◽

Content Type ◽

Security Culture ◽

Systems Research ◽

Information Security Culture

Purpose – The aim of this paper is to survey existing information security culture research to scrutinise the kind of knowledge that has been developed and the way in which this knowledge has been brought about. Design/methodology/approach – Results are based on a literature review of information security culture research published between 2000 and 2013 (December). Findings – This paper can conclude that existing research has focused on a broad set of research topics, but with limited depth. It is striking that the effects of different information security cultures have not been part of that focus. Moreover, existing research has used a small repertoire of research methods, a repertoire that is more limited than in information systems research in general. Furthermore, an extensive part of the research is descriptive, philosophical or theoretical – lacking a structured use of empirical data – which means that it is quite immature. Research limitations/implications – Findings call for future research that: addresses the effects of different information security cultures; addresses the identified research topics with greater depth; focuses more on generating theories or testing theories to increase the maturity of this subfield of information security research; and uses a broader set of research methods. It would be particularly interesting to see future studies that use intervening or ethnographic approaches because, to date, these have been completely lacking in existing research. Practical implications – Findings show that existing research is, to a large extent, descriptive, philosophical or theoretical. Hence, it is difficult for practitioners to adopt these research results, such as frameworks for cultivating or assessment tools, which have not been empirically validated. Originality/value – Few state-of-the-art reviews have sought to assess the maturity of existing research on information security culture. Findings on types of research methods used in information security culture research extend beyond the existing knowledge base, which allows for a critical discussion about existing research in this sub-discipline of information security.

Download Full-text