Factors Influencing Employees' Compliance with Information Security Policy in Organization

Jafari, Seyed Mohammadbagher; Hamidizadeh, Ali; Montazeri, Raziyeh

Factors Influencing Employees' Compliance with Information Security Policy in Organization

Document Type : Original Article

Authors

Seyed Mohammadbagher Jafari ¹

Ali Hamidizadeh ²

Raziyeh Montazeri ²

¹ University of Tehran

² Null

Abstract

Today, risks related to information security are amajor challenge for many organizations, since these risks mayhave direct consequences, including loss ofcredibility and monetary damage. Statistics suggest that damages the information systems security is increasing.Many organizationsrecognize that their employees, who areoften considered the weakest link in information security, canalso be great assets in the effort to reduce risk related to information security. There is not significant research on the human aspect of information systems security and practice. Hence the purpose of this study was to examine factors influencing the employee compliance with information systems security policy in organization. To this end, 221 persons (including staff of 5 different organizations) were selected with the proportional method. After collecting the data, hypotheses were analyzed through confirmatory factor analysis and structural equation modeling using AMOS software. The results showed that self-efficacy and attitude about the compliance have the most effects on the intention to comply with information security policy in organization.

Keywords

Information security awareness

Information security

Information systems

Information security policy

compliance