Exploring the role of intrinsic motivation in ISSP compliance: enterprise digital rights management system case

Abstract

PurposeEmployee compliance with information system security policies (ISSPs) has been emphasized as a key factor in protecting information assets against insider threats. Even though previous studies have identified extrinsic factors (in the form of external pressure, rewards and social norms) influencing employee compliance, the functioning of employees' intrinsic motivation has not been clearly analyzed. Thus, the aim of this study is to explore the influence of intrinsic motivations on employees' ISSP compliance.Design/methodology/approachThis study follows a survey approach and conducts structural equation modeling using WarpPLS 5.0 to test the research model and hypotheses. The survey respondents are users of an enterprise digital rights management (EDRM) system.FindingsThe analysis results demonstrate that work impediments, perceived responsibility and self-efficacy significantly influence the intention to comply with ISSP. Additionally, autonomy significantly affects self-efficacy and perceived responsibility. Furthermore, autonomy plays a moderating role in the relationship between work impediment and ISSP compliance intentions.Originality/valueThis study initiatively explores the effect of intrinsic motivations on ISSP compliance intention of employees for a specific information security system (i.e. the EDRM system). This study clarifies the enabling role of intrinsic motivations in ISSP compliance and helps organizations to understand that employee's self-motivated intention, i.e. autonomy, is an essential factor that achieves a higher level of ISSP compliance in the workplace.

Digging deeper into responsibility: an investigation of responses to online help-request marketing campaigns in social networking groups

“…Second, this paper also extends our understanding of responsibility by dividing it into perceived causality and answerability as well as measuring them with self-developed instruments. Although multiple studies reported that responsibility has more than one dimension (Schlenker et al ., 1994; Auhagen and Bierhoff, 2002), responsibility has been widely treated as a broad and unidimensional concept empirically (Jeon et al ., 2021; Erlandsson et al ., 2015). To fill this gap, we developed instruments to empirically measure perceived causality and answerability by following a rigorous instrument development procedure (Moore and Benbasat, 1991).…”

Understanding sustained participation in crowdsourcing platforms: the role of autonomy, temporal value, and hedonic value

“…proposed that the freedom and control offered to crowdworkers on task decisionmaking is a key determinant of their satisfaction. Jeon et al (2020) found that employees' perception of discretion in making decisions with regard to information systems security policies positively influences their self-efficacy and feelings of responsibility for security-related tasks. Similarly, Ke and Zhang (2010), Ke et al (2012), Menard et al (2017), and Liang et al (2015) also underlined the relevance of work-task autonomy.…”

The “Right” recipes for security culture: a competing values model perspective

“…Security-related subjective norms and security compliance pressure The human aspect of ISP compliance in organizations has been and continues to be an important area of academic research (Jeon et al, 2020;Kim and Han, 2019;Vedadi and Warkentin, 2020). The prior literature has used many theories to explain how and why employees comply with ISPs (Bulgurcu et al, 2010;Moody et al, 2018).…”