Information security policy compliance model in organizations

By Nader Sohrabi Safa, Rossouw Von Solms, Steven Marcus Furnell. Computers & security, 2016

389 citations recorded by the source corpus.

Information security policy compliance protects information assets in organizations.Involvement positively influences information security policy compliance.Attachment does not positively influence information security policy compliance.Commitment positively influences information security policy compliance.Personal norms positively influence information security policy compliance. The Internet and information technology have influenced human life significantly. However, information security is still an important concern for both users and organizations. Technology cannot solely guarantee a secure environment for information; the human aspects of information security should be taken into consideration, besides the technological aspects. The lack of information security awareness, ignorance, negligence, apathy, mischief, and resistance are the root of users' mistakes. In this research, a novel model shows how complying with organizational information security policies shapes and mitigates the risk of employees' behaviour. The significant aspect of this research is derived from the conceptualization of different aspects of involvement, such as information security knowledge sharing, collaboration, intervention and experience, as well as attachment, commitment, and personal norms that are important elements in the Social Bond Theory. The results of the data analysis revealed that information security knowledge sharing, collaboration, intervention and experience all have a significant effect on employees' attitude towards compliance with organizational information security policies. However, attachment does not have a significant effect on employees' attitude towards information security policy compliance. In addition, the findings have shown that commitment and personal norms affect employees' attitude. Attitude towards compliance with information security organizational policies also has a significant effect on the behavioural intention regarding information security compliance.

Subfields: Computer Networks and Communications, Information Systems, Sociology and Political Science

View Paper: https://www.semanticscholar.org/paper/e40494ec05a43c652933d46f85435f0256450ab9

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

In Sociology and Political Science

  1. H. Basım

Citations in the corpus