The role of norms in information security policy compliance. (19th June 2020)

• Record Type: Journal Article
• Authors: Wiafe, Isaac; Koranteng, Felix Nti; Wiafe, Abigail; Obeng, Emmanuel Nyarko; Yaokumah, Winfred
• Is Part Of: Information and computer security. Volume 28:Number 5(2020)
• Page Start: 743
• Page End: 761
• Publication Date: 2020-06-19
• Subjects: Social norms -- Compliance intention -- Attitude towards compliance -- Information security policy; Computer security -- Management -- Periodicals; Computer networks -- Security measures -- Periodicals; Data protection -- Management -- Periodicals; 658.47
• DOI: 10.1108/ICS-08-2019-0095
• Languages: English
• ISSNs: 2056-4961

Abstract

Abstract : Purpose: The purpose of this paper is to determine which factors influence information system security policy compliance. It examines how different norms influence compliance intention. Design/methodology/approach: Based on relevant literature on information system security policy compliance, a research model was developed and validated. An online questionnaire was used to gather data from respondents and partial least square structural equation modelling (PLS-SEM) was used to analyse 432 responses received. Findings: The results indicated that attitude towards information security compliance mediates the effects of personal norms on compliance intention. In addition, descriptive and subjective norms are significant predictors of personal norms. Originality/value: Though advancement in technology has reached significant heights, it is still inadequate to guaranteed information systems' security. Researchers have identified humans to be central in ensuring information security. To this effect, this study provides empirical evidence of the role of norms in influence information security behaviour.