Internalization of Information Security Policy and Information Security Practice: A Comparison with Compliance

dc.contributor.author Park, Minjung
dc.contributor.author Chai, Sangmi
dc.date.accessioned 2017-12-28T02:08:24Z
dc.date.available 2017-12-28T02:08:24Z
dc.date.issued 2018-01-03
dc.description.abstract Most recent information security incidents have been caused by employees’ poor managements rather than technology defects. Accordingly, organizations try to improve their information security by demanding that employees conform to information security policies. Previous studies examined the effect of organization’s enforcement-based systems, using penalties and rewards, on employees’ comply with information security policies. It found there is a lack of autonomy and sustainability if conformity depended on external environmental factors. To confirm, following social influence theory, that employees’ information security practices can be better performed if they go beyond compliance and are internalized, we developed an instrument that measures employees’ attitudes on information security policies and conducted a pilot test. The results show that information security practices are performed better by the higher internalization group than by the compliance group, proving the greater effectiveness of internalization in improving both employees’ and organizations’ information security.
dc.format.extent 9 pages
dc.identifier.doi 10.24251/HICSS.2018.595
dc.identifier.isbn 978-0-9981331-1-9
dc.identifier.uri http://hdl.handle.net/10125/50484
dc.language.iso eng
dc.relation.ispartof Proceedings of the 51st Hawaii International Conference on System Sciences
dc.rights Attribution-NonCommercial-NoDerivatives 4.0 International
dc.rights.uri https://creativecommons.org/licenses/by-nc-nd/4.0/
dc.subject Information Security and Privacy
dc.subject compliance, information security practice behavior, information security policy, internalization, social influence theory
dc.title Internalization of Information Security Policy and Information Security Practice: A Comparison with Compliance
dc.type Conference Paper
dc.type.dcmi Text
Files
Original bundle
Now showing 1 - 1 of 1
No Thumbnail Available
Name:
paper0597.pdf
Size:
697.5 KB
Format:
Adobe Portable Document Format
Description: