Information security research methodologies: A review

Information is critical for the survival and growth of organisations and people. The challenge for Information management is now less about managing the activities that collect, store and disseminate information. Rather, there is a greater focus on managing the activities that make changes in the patterns of behaviour of customers, people, and organizations, and information that leads to changes in the way people use information to engage in knowledge focussed activities. Information systems’ security management is undoubtedly a critical activity in a world where computing is ubiquitous and information systems are interconnected globally. This paper is a review of the research methodologies used in the literature of information security for the last decade. This research opens up many new avenues for further research in information security.