The Security Culture Readiness Model (SCRM) for Saudi Universities: A Preliminary Structure

Context: In today's interconnected digital landscape, cultivating a robust Information Security culture within organizations is imperative to mitigate data breaches and unauthorized access risks. Objective: This paper presents the preliminary structure of the Security Culture Readiness Model (SCRM), aimed at assessing and enhancing organizations' preparedness to instill a comprehensive security culture. Method: Through a systematic Multivocal Literature Review (MLR), we systematically identified pivotal knowledge areas and best practices essential for nurturing a resilient security culture within university settings. Subsequently, the SCRM underwent rigorous evaluation utilizing a case study methodology to refine its structure and applicability. Results: Our analysis demonstrates the SCRM's efficacy in evaluating universities' readiness levels and pinpointing actionable strategies to foster an information security culture. By serving as a foundational tool, the SCRM empowers universities to elevate security awareness, discern strengths, and address weaknesses, thereby fostering a culture of vigilance and resilience against evolving cybersecurity threats. Conclusion: This study contributes to advancing security practices within universities, offering invaluable insights into navigating complex security challenges and fortifying readiness for future adversities.