From policies to culture

Rossouw Von Solms, Basie Von Solms

Research output: Contribution to journalArticlepeer-review

133 Citations (Scopus)


Management normally sets company vision, rules and regulations through policies. These policies should provide guidance to employees and partners as to how they should act and behave to be in line with management's wishes. These policies need to be structured and organized effectively to cater for business and technological dynamics and advances. Having defined a series of company policies does not ensure that all employees will necessarily obey these policies. Ideally these policies must manifest in some company culture to ensure appropriate behaviour. This can only be achieved through a proper education process. This paper addresses exactly the process of integrating policies, education and culture.

Original languageEnglish
Pages (from-to)275-279
Number of pages5
JournalComputers and Security
Issue number4
Publication statusPublished - Jun 2004


  • Organizational culture
  • Security behaviour
  • Security culture
  • Security education
  • Security policy

ASJC Scopus subject areas

  • General Computer Science
  • Law


Dive into the research topics of 'From policies to culture'. Together they form a unique fingerprint.

Cite this