Motivating Information Security Policy Compliance: Insights from Perceived Organizational Formalization. Issue 1 (2nd January 2022)

• Record Type: Journal Article
• Authors: Hong, Yuxiang; Furnell, Steven
• Is Part Of: Journal of computer information systems. Volume 62:Issue 1(2022)
• Page Start: 19
• Page End: 28
• Publication Date: 2022-01-02
• Subjects: Organizational formalization -- information security policy compliance -- theory of planned behavior; Electronic data processing -- Study and teaching -- Periodicals; 658.4038011
• DOI: 10.1080/08874417.2019.1683781
• Languages: English
• ISSNs: 0887-4417

Abstract

ABSTRACT: Psychological and behavioral characteristics are among the most important factors that instigate information security incidents. Although many previous studies have discussed the influencing factors of information security policy compliance behavior in an organization, few have considered the influence of organizational structures. In this study, the mechanism by which information security policy compliance behavioral intention is formed was studied by integrating the theory of planned behavior (TPB) and perceived organizational formalization. Data analysis was performed using the structural equation modeling (SEM) with data obtained from a survey of 261 company employees. The empirical results reveal that perceived organizational formalization significant affected cognitive processes theorized by TPB, behavioral habits, and deterrent certainty. This study suggests that formalized rules, procedures, and communications should be designed to improve employee information security policy compliance behavioral habits and intentions.