Employees' adherence to information security policies: An exploratory field study

Information and Management

Volumn 51, Issue 2, 2014, Pages 217-224

  Siponen, Mikko ^a   Adam Mahmood, M ^b   Pahnila, Seppo ^a  

^a UNIVERSITY OF OULU   (Finland)

^b UNIVERSITY OF TEXAS AT EL PASO   (United States)

Author keywords

Attitude; Cognitive Evaluation Theory; Employees' compliance of information systems security policies; Information security; Information security policy compliance; Information systems security; Information systems security policies; Moderating effect; Multi theory based model to explain employees' adherence to information security policies; Normative beliefs; Protection Motivation Theory; Response efficacy; Rewards; Self efficacy; SEM based analysis of the model; Theory of Reasoned Action; Threat appraisal; Work experience

Indexed keywords

ATTITUDE; COGNITIVE EVALUATION THEORY; INFORMATION SECURITY POLICIES; INFORMATION SYSTEMS SECURITY; INFORMATION SYSTEMS SECURITY POLICIES; MODERATING EFFECT; NORMATIVE BELIEFS; PROTECTION MOTIVATION THEORY; RESPONSE EFFICACY; REWARDS; SELF EFFICACY; THEORY OF REASONED ACTION; THREAT APPRAISAL; WORK EXPERIENCE;

HUMAN RESOURCE MANAGEMENT; INFORMATION SYSTEMS; MOTIVATION; PERSONNEL TRAINING; SECURITY OF DATA;

SECURITY SYSTEMS;

EID: 84891789669     PISSN: 03787206     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.im.2013.08.006     Document Type: Article

References (14)

1. K. Aytes, and T. Connolly Computer and risky computing practices: a rational choice perspective J. Organ. End User Comput. 16 2 2004 22 40
2. J. Cameron, W.D. Pierce, K.M. Banko, and A. Gear Achievement-based rewards and intrinsic motivation: a test of cognitive mediators J. Educ. Psychol. 97 4 2005 641 655 (Pubitemid 43250907)
3. J. D'Arcy, A. Hovav, and D. Galletta User awareness of security countermeasures and its impact on information systems misuse: a deterrence approach Inf. Syst. Res. 17 1 2009 79 98
4. T. Herath, and H.R. Rao Protection motivation and deterrence: a framework for security policy compliance in organisations Eur. J. Inf. Syst. 18 2 2009 106 125
5. A. Hovav, and J. D'Arcy Does culture really matter? A cross-cultural analysis of security countermeasure effectiveness based on deterrence theory Inf. Manage. 49 2 2012 99 110
6. S. Jai-Yeol Out of fear or desire? Toward a better understanding of employees' motivation to follow IS security policies Inf. Manage. 48 7 2011 296 302
7. A.C. Johnston, and M. Warkentin Fear appeals and information security behaviors: an empirical study MIS Q. 34 3 2010 549 566
8. M. Karjalainen, and M. Siponen Towards a meta-theory for designing information systems security training approaches J. Assoc. Inf. Syst. 12 8 2011 518 555
9. A.G. Kotulic, and J.G. Clark Why there aren't more information security research studies Inf. Manage. 41 2004 597 607
10. M. Limayem, S.G. Hirt, and C.M.K. Cheung How habit limits the predictive power of intention: the case of information systems continuance MIS Q. 30 2 2007 705 737 (Pubitemid 351153309)
11. P.M. Podsakoff, S.B. MacKenzie, J.Y. Lee, and N.P. Podsakoff Common method bias in behavioral research: a critical review of the literature and recommended remedies J. Appl. Psychol. 88 5 2003 879 903 (Pubitemid 37239703)
12. M. Siponen, and A. Vance Neutralization: new insights into the problem of employee information systems security policy violation MIS Q. 34 3 2010 487 502
13. M. Siponen, and R. Willison Information security management standards: problems and solutions Inf. Manage. 46 5 2009 267 270
14. Z. Yang, S. Cai, Z. Zhou, and N. Zhou Development and validation of an instrument to measure user perceived service quality of information presenting Web portals Inf. Manage. 42 4 2005 575 589 (Pubitemid 40114727)