Today’s businesses operate in an interconnected and global environment allowing them to collaborate with one another and share information resources. At the same time, this interconnectivity exposes the organization to many internal (employees) and external threats. Internal threat is among the top information security issues facing organizations as the human factor is regarded as the weakest link in the security chain. To address these researchers have suggested the fostering of an information security culture within the organization to address human behavior so that information security becomes second nature to employees. An important step in the fostering of an information security culture is the assessment of the current state of the culture. This paper focuses on the analysis and comparison of current information security culture assessment approaches at ABC (Private) Ltd. The organization is the leading apparel manufacturing organization headquartered in Sri Lanka. The appropriate literature reviews have been done and related theories are identified from those literature reviews. A conceptual framework has been developed by evaluating the above literature. Three (03) factors were found under independent variables. Those were Awareness and Training, Management Support, and Compliance. The population used is 137 who have attached to the technology services division of the organization. The sample was 102 for the quantitative research methodology. The method of analysis was conducting a survey related to independent and dependent variables with 25 questions. Sample data were analyzed by using SPSS statistics version 29. In this research evaluation and analysis have been carried out to determine the factors affecting organizational culture on information security and offer recommendations to strengthen it. The most affecting factor was ascertained as ‘Compliance’. All three hypotheses were tested and analyzed and proved the relationship between all the independent variables and organizational culture on information security at ABC (Private) Ltd.
