Managing Employee Compliance with Information Security Policies: The Critical Role of Top Management and Organizational Culture*
| Autor: | Qing Hu, Tamara Dinev, Donna K. Cooke, Paul Hart |
|---|---|
| Rok vydání: | 2012 |
| Předmět: |
Organizational behavior management
Information Systems and Management Employee research business.industry Strategy and Management Control (management) Theory of planned behavior Organizational culture Information security Public relations Organisation climate General Business Management and Accounting Management of Technology and Innovation Survey data collection Business Marketing |
| Zdroj: | Decision Sciences. 43:615-660 |
| ISSN: | 0011-7315 |
| DOI: | 10.1111/j.1540-5915.2012.00361.x |
| Popis: | We develop an individual behavioral model that integrates the role of top management and organizational culture into the theory of planned behavior in an attempt to better understand how top management can influence security compliance behavior of employees. Using survey data and structural equation modeling, we test hypotheses on the relationships among top management participation, organizational culture, and key determinants of employee compliance with information security policies. We find that top management participation in information security initiatives has significant direct and indirect influences on employees’ attitudes towards, subjective norm of, and perceived behavioral control over compliance with information security policies. We also find that the top management participation strongly influences organizational culture which in turn impacts employees’ attitudes towards and perceived behavioral control over compliance with information security policies. Furthermore, we find that the effects of top management participation and organizational culture on employee behavioral intentions are fully mediated by employee cognitive beliefs about compliance with information security policies. Our findings extend information security research literature by showing how top management can play a proactive role in shaping employee compliance behavior in addition to the deterrence oriented remedies advocated in the extant literature. Our findings also refine the theories about the role of organizational culture in shaping employee compliance behavior. Significant theoretical and practical implications of these findings are discussed. |
| Databáze: | OpenAIRE |
| Externí odkaz: |
|