An examination of factors that influence the number of information security policy violations in Qatari organizations. (9th March 2015)

• Record Type: Journal Article
• Authors: Al-Mukahal, Hasan M.; Alshare, Khaled
• Is Part Of: Information and computer security. Volume 23:Number 1(2015)
• Page Start: 102
• Page End: 118
• Publication Date: 2015-03-09
• Subjects: Qatar -- Information security -- Trust -- Hofstede's cultural dimensions -- Information security policy violations -- Policy scope; Computer security -- Management -- Periodicals; Computer networks -- Security measures -- Periodicals; Data protection -- Management -- Periodicals; 658.47
• DOI: 10.1108/ICS-03-2014-0018
• Languages: English
• ISSNs: 2056-4961

Abstract

Abstract : Purpose: – This paper aims to investigate factors that impact the number of information security policy violations in Qatari organizations and to examine the moderating effect of Hofstede's cultural dimensions on the relationships between the independent factors and the number of information security policy violations. Design/methodology/approach: – Grounded in related theories from the fields of criminology, behavioral psychology and theory of planned behavior, two components that affect the number of information security policy violations were identified. A quantitative approach was used by developing a questionnaire survey to collect the data. The research model was tested using 234 employees from different Qatari organizations. Findings: – The results of the study indicate that trust, the impact of implementing information security policy on work environment and the clarity of the scope of the information security policy were significant factors in predicting the number of information security policy violations. The findings also reveal that cultural dimensions such as uncertainty avoidance and collectivism moderate the relationships between trust, clarity of policy scope and impact of information security policy on work environment and the number information security policy violations. Research limitations/implications: – The generalizability of the results is limited because the sample of the study was drawn from only one developing country. Therefore, a plausible future research could be testing the proposed model in many developing and developed countries. Practical implications: – The paper includes practical implications for developing and implementing security measures and policies in diversified work environments. Originality/value: – This study fulfils a gap in investigating the factors that influence the number of information security policy violations and the moderating effect of cultural dimensions in developing countries such as Qatar.