Conceptualising improvisation in information systems security

Abstract

Information Systems Security (ISS) has constantly been ranked as a key concern for Information Systems (IS) managers. Research in the field has largely assumed rational choice (functional) approaches to managing ISS. Such approaches do not give due recognition to the role of improvisation in ISS work. Empirical evidence in organisations suggests that in the context of dynamic, volatile and uncertain environments practitioners are both rational and adaptive (a manifestation of improvisation). In this paper, we conceptualise and demonstrate the manifestation of improvisation in ISS. In order to develop a better understanding of improvisation in ISS activities, hermeneutical and exegetical techniques were employed. Empirical data were collected through in-depth interviews in a single case study. The data obtained were analysed and interpreted hermeneutically. Generally it was found that improvisation is manifested in ISS activities. Implications of these and other findings for the scholarly community and for practical use are discussed.

Keywords:

• improvisation
• information systems security
• rational choice
• hermeneutics

Acknowledgements

This material is based upon work supported financially by the National Research Foundation (NRF). Any opinion, findings and conclusions or recommendations expressed in this material are those of the authors and therefore the NRF does not accept any liability in regard thereto.

Additional information

Notes on contributors

Kennedy Njenga

About the authors

Kennedy Njenga, Ph.D., is a faculty member at the Department of Applied Information Systems, University of Johannesburg in South Africa. He currently does research that focuses on methodological and philosophical issues related to security of information systems. He also has a special research interest on security around the use of wireless and mobile applications in organisations.

Irwin Brown

Irwin Brown is Professor of Information Systems and Director of the Centre for IT and National Development in Africa (CITANDA) at the University of Cape Town in South Africa. His research focuses primarily on issues related to information systems in developing country contexts.