Information Security Culture in Russian ICT Small and Medium Sized Enterprises.

Information security culture is currently seen as a promising phenomenon to be developed and studied regarding information security in organizations. This paper presents research in progress concerning the study of information security culture in small and medium sized (SMEs) ICT enterprises. Based on interview data collected in St. Petersburg area, the results of an open coding phase of the Grounded Theory method are presented to show further delineation for theoretical sampling. The initial categorization discloses essential features of information security culture in Russian ICT SMEs. Finally, in the conclusions the issues for further research, i.e., theoretical sampling, are stated. [ABSTRACT FROM AUTHOR]