Conceptualising improvisation in information security risk management activities : a South Africa case study

Includes abstract.Includes bibliographical references (leaves 286-299).The aim of this research was to understand how functionalist approaches and the incremental approaches are manifested in ISRM activities. New insights and meaning to the ISRM activities were presented when the incrementalist approaches to ISRM and the functionalist approaches to ISRM were examined holistically. Improvisation, for the purpose of this research, was used to explain this holistic understanding