Information security governance implementation within the mobile device environment

Phillips, Celeste

Information security governance implementation within the mobile device environment

Master Thesis

2014

Publisher

University of Cape Town

Department

Department of Information Systems

Faculty

Faculty of Commerce

Abstract

Organisational information has been acknowledged to be a valuable asset which must be protected no matter where it is accessed from or how it is accessed. Mobile devices such as smartphones and tablets are becoming a popular means of accessing the organisation's information whether it is on a company-owned or personal mobile device. This has led to an increased awareness of potential risks to the organisation within the mobile device environment which requires organisations to be more vigilant with regards to information security governance. The objective of the research was, therefore, to investigate how organisations go about implementing information security governance within the mobile device environment. The research was conducted at a Retail company where two mobile device implementations took place. The research philosophy was interpretive and the research strategy employed was a grounded case study which allowed theory to be developed using a combination of the grounded theory methodology and the case study method. The use of a mixed approach, deductive and inductive, allowed a conceptual framework to be developed from literature which was used as a sensitising device to start the data collection and analysis process. Qualitative data was collected from multiple sources such as semi-structured interviews and company documents.

Description

Includes bibliographical references.

Reference:

Collections

Masters

Full item page