Spreading information security

Spreading information security

In a knowledge economy where growth is dependent on the quality and accessibility of information, traditional lock and key security methods are simply inadequate in protecting an organisation and its data.

Professor Karlheinz Kautz (left), Dr Duy Dang-Pham (centre) and Dr Siddhi Pittayachawan (right) worked with an industry partner to develop a research project exploring social relations and their effect on information security. Professor Karlheinz Kautz (left), Dr Duy Dang-Pham (centre) and Dr Siddhi Pittayachawan (right) worked with an industry partner to develop a research project exploring social relations and their effect on information security.

According to RMIT Vietnam Lecturer Duy Dang-Pham, organisations need a strong information security (InfoSec) culture, in addition to its more technical InfoSec strategies.

Dr Duy, along with senior researchers Professor Karlheinz Kautz, Dr Siddhi Pittayachawan and Dr Vince Bruno from the School of Business IT & Logistics at RMIT University in Melbourne, have recently completed a research project focused on social relations and their effect on information security (InfoSec).

“We’ve found that employees increase their information security awareness as a result of increased socialising with colleagues who have a high awareness of InfoSec issues,” said Dr Duy, who teaches in RMIT Vietnam’s School of Science & Technology.

“In other words, information security is contagious.”

The group’s research project investigated the creation of an InfoSec climate inside a large Vietnamese company.

“The partnership between the academics and the organisation allowed for a practical research project with immediate impact,” he said.

“We took part in the design and implementation of structural changes to improve InfoSec awareness among the staff of the enterprise.

“The project started with internal training on information security issues and identifying the key influencers in the InfoSec culture within the workplace. These influencers are staff members of different levels or roles, and who were informally providing information security advice across the network.”

According to RMIT Vietnam Lecturer Duy Dang-Pham, organisations need a strong information security (InfoSec) culture, in addition to its more technical InfoSec strategies.

Dr Duy, along with senior researchers Professor Karlheinz Kautz, Dr Siddhi Pittayachawan and Dr Vince Bruno from the School of Business IT & Logistics at RMIT University in Melbourne, have recently completed a research project focused on social relations and their effect on information security (InfoSec).

“We’ve found that employees increase their information security awareness as a result of increased socialising with colleagues who have a high awareness of InfoSec issues,” said Dr Duy, who teaches in RMIT Vietnam’s School of Science & Technology.

“In other words, information security is contagious.”

The group’s research project investigated the creation of an InfoSec climate inside a large Vietnamese company.

“The partnership between the academics and the organisation allowed for a practical research project with immediate impact,” he said.

“We took part in the design and implementation of structural changes to improve InfoSec awareness among the staff of the enterprise.

“The project started with internal training on information security issues and identifying the key influencers in the InfoSec culture within the workplace. These influencers are staff members of different levels or roles, and who were informally providing information security advice across the network.”

Researchers at RMIT have found that information security is contagious. Researchers at RMIT have found that information security is contagious.

The researchers analysed the perception of security issues among the employees as well as their social relationships and socialising patterns such as advice sharing.

This analysis allowed Dr Duy and his team to chart the changes in perception and socialising patterns over a period of three months, and track the changes that occurred.

“Staff who already have high awareness of information security can play a crucial role in elevating the organisation’s InfoSec culture, simply through social influence,” Dr Duy concluded.

The group’s research “Explaining the Development of Information Security Climate and an Information Security Support Network: A Longitudinal Social Network Analysis” has been published in the Australasian Journal of Information Systems.

Story: Matt Kelly

  • Research
21 June 2019

Share

Engage

Related news

Music concert goers with Vietnamese flags

Vietnamese music enters a new era of identity and global reach
Icon / Small / Calendar Created with Sketch. 05 Jan 2026

A new whitepaper from RMIT University reveals how Vietnamese artists and audiences are blending cultural heritage with global trends to carve out a distinctive V-Pop identity.

AI law

Navigating Vietnam’s new Law on Artificial Intelligence
Icon / Small / Calendar Created with Sketch. 02 Jan 2026

Vietnam’s first-ever Law on Artificial Intelligence (AI) was passed on 10 December 2025 and will take effect from 1 March 2026, marking a milestone in the country’s digital governance and innovation strategy.

aerial view of a nuclear power plant site

Plugging nuclear energy safely into Vietnam’s grid
Icon / Small / Calendar Created with Sketch. 02 Jan 2026

Vietnam’s new Atomic Energy Law opens the door to advanced nuclear technologies, but success will hinge on grid readiness, safety culture, and skilled people, say RMIT University Vietnam academics.

news-thumbnail-the-top-technology-and-communications-trends-in-fashion-industry.jpg

RMIT experts flag security and mental health risks from unverified content
Icon / Small / Calendar Created with Sketch. 19 Dec 2025

Experts in information technology, psychology and communication from RMIT Vietnam share their perspectives on the risks associated with consuming and spreading unverified information online.

Load more +