Security Awareness: The First Step in Information Security Compliance Behavior. Issue 4 (4th July 2021)

• Record Type: Journal Article
• Authors: Hwang, Inho; Wakefield, Robin; Kim, Sanghyun; Kim, Taeha
• Is Part Of: Journal of computer information systems. Volume 61:Issue 4(2021)
• Page Start: 345
• Page End: 356
• Publication Date: 2021-07-04
• Subjects: Word -- information security -- awareness -- social learning theory -- compliance intention -- security visibility -- management participation -- security policy; Electronic data processing -- Study and teaching -- Periodicals; 658.4038011
• DOI: 10.1080/08874417.2019.1650676
• Languages: English
• ISSNs: 0887-4417

Abstract

ABSTRACT: In this study, we use the attentional phase of social learning theory to link workplace security-related experiences and observations to employees' security awareness. The responses of 398 organizational employees serve to test our research model using structural equational modeling with AMOS 22.0. The results show security awareness arises from both explicit and subjective security experiences in the workplace. Our respondents indicate knowledge of a physical system has little, if any, effect on security awareness. However, security education, policy, visibility and managerial security participation are important for producing security awareness. Furthermore, managerial participation strengthens the links between organizational security efforts and security awareness. We discuss the implications of our study for future security compliance research and practice.