Factors That Influence Employees’ Security Policy Compliance: An Awareness-Motivation-Capability Perspective

Chen, Xiaofeng; Chen, Liqiang; Wu, Dazhong

doi:10.1080/08874417.2016.1258679

Cited by 36 publications

(31 citation statements)

References 46 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…The literature has documented many awareness programs where various SETA programs are proposed for the purpose of increasing employees' security awareness which promote ISP compliance among employees within organizations (e.g. Yoo et al, 2018;Barlow et al, 2018;Chen et al, 2018;Burns et al, 2018). We assert that SETA programs have two essential partsthe underpinning part and the organization-specific part.…”

Section: Practical Implicationsmentioning

confidence: 94%

Building an awareness-centered information security policy compliance model

Koohang

Anderson

Nord

et al. 2019

IMDS

View full text Add to dashboard Cite

Purpose The purpose of this paper is to build an awareness-centered information security policy (ISP) compliance model, asserting that awareness is the key to ISP compliance and that awareness depends upon several variables that influence successful ISP compliance. Design/methodology/approach The authors built a model with seven constructs, i.e., leadership, trusting beliefs, information security issues awareness (ISIA), ISP awareness, understanding resource vulnerability, self-efficacy (SE) and intention to comply. Seven hypotheses were stated. A sample of 285 non-management employees was used from various organizations in the USA. The authors used path modeling to analyze the data. Findings The findings indicated that IS awareness depends on effective organizational leadership and elevated employees’ trusting beliefs. The understanding of resource vulnerability (URV) and SE are influenced by IS awareness resulting from effective leadership and elevated employees’ trusting beliefs which guide employees to comply with ISP requirements. Practical implications Practical implications were aimed at organizations embracing an awareness-centered information security compliance program to secure organizations’ assets against threats by implementing various security education and training awareness programs. Originality/value This paper asserts that awareness is central to ISP compliance. Leadership and trusting beliefs variables play significant roles in the information security awareness which in turn positively affect employees’ URV and SE variables leading employees to comply with the ISP requirements.

show abstract

Section: Practical Implicationsmentioning

confidence: 94%

Building an awareness-centered information security policy compliance model

Koohang

Anderson

Nord

et al. 2019

IMDS

View full text Add to dashboard Cite

show abstract

“…According to (Li et al 2019), they note that their colleagues' behaviour influences employees' behaviour in the field of cyber security as internal or external motivators. In organizational cyber security context, people usually tend to behave as their co-workers and friends (Chen, Chen, and Wu 2018;D'Arcy and Greene 2014;Donalds and Osei-Bryson 2020). In (Li et al 2019), the author's proposed Cues to action is an antecedent to cyber security behaviour, and cyber security behaviour directly leads to cyber security compliance, and 'use behaviour' is a significant construct of UTAUT2 model.…”

Section: Social Influencementioning

confidence: 99%

Examining the Impact of Technical Controls, Accountability and Monitoring towards Cyber Security Compliance in E-government Organisations

Alqahtani¹,

Braun²

2021

Preprint

View full text Add to dashboard Cite

IT infrastructure and systems are made up of technical as well as social systems that work in alliance to ensure that organization's goals and objectives are met. Security controls and measures are developed and used to guard data and information systems of the organization. The breaches of Cyber security are primarily caused by the misuse of information systems and failure to comply with cyber security measures. Cyber security non-compliance is a major concern for organizations. For effective compliance and human acceptance of cyber security technology and complying with cyber practices, it is essential to ascertain, research, and examine the factors which contribute to the compliance and implementation of cyber security. This study has utilized an enhanced UTAUT2 i.e. Unified Theory of Acceptance and Use of Technology 2 model and assessed its relationship with cyber security compliance. Five new formal and informal factors that affect cyber security compliance in organizations are identified and evaluated. The research questions addressed are: how the formal factors of technical measures; accountability; monitoring and evaluation impact employee's behaviour towards cyber security compliance. The study comprises a correlational survey of employees working at e-government organizations in Saudi Arabia. Results indicate that there is a significant role play by technical measures; accountability; monitoring and evaluation, on employee attitudes and behaviour towards cyber security compliance.

show abstract

“…In previous literature, the operationalization of the three elements presented in the AMC model has differed considerably. This is due, in part, to the examination of differing organizational competitive elements including but not limited to innovation and product strategy (i.e., Chen, Tribbitt, Yang, & Li, 2017), inventory performance (i.e., Udenio et al, 2018), engagement with environmental alliances (Stadtler & Lin, 2017), and employee compliance (i.e., Chen, Chen, & Wu, 2018). The cross‐disciplinary nature of the model encourages diversity in the conceptualization of the constructs.…”

Section: Literature Review and Hypothesesmentioning

confidence: 99%

Competitive sustainability and stakeholder engagement: Exploring awareness, motivation, and capability

Schniederjans

Khalajhedayati

2020

Bus Strat Env

View full text Add to dashboard Cite

In adding to competitive dynamics and sustainability literature, this study examines the role of a supplier and consumer on a focal firm's sustainability competitiveness through the awareness, motivation, and capability (AMC) perspective and stakeholder engagement research. Regression analyses are performed utilizing secondary sustainability and financial data to test proposed environmental and social competitiveness hypotheses. A constraint factor model is also tested. This study finds that a focal firm's motivation is positively associated with its own sustainability competitiveness. The study also finds that awareness and capability are negatively associated with environmental and social competitiveness. Finally, whereas suppliers' AMC have no significant impact, customer awareness and capability do. The findings reflect both conformity and divergence from the AMC model when applying it to a supply chain context as well as enhance the managerial understanding of how a supply and customer base can impact their own sustainability competitiveness.

show abstract

Factors That Influence Employees’ Security Policy Compliance: An Awareness-Motivation-Capability Perspective

Cited by 36 publications

References 46 publications

Building an awareness-centered information security policy compliance model

Building an awareness-centered information security policy compliance model

Examining the Impact of Technical Controls, Accountability and Monitoring towards Cyber Security Compliance in E-government Organisations

Competitive sustainability and stakeholder engagement: Exploring awareness, motivation, and capability

Contact Info

Product

Resources

About