Moral Intensity Dimensions of Information Security Policy Compliance: Perspectives of Construal Level Theory and Ethical Theories

Simple item page
dc.contributor.authorZheng, Dailin (Ellen)
dc.contributor.authorWalter, Zhiping
dc.date.accessioned2024-12-26T21:09:57Z
dc.date.available2024-12-26T21:09:57Z
dc.date.issued2025-01-07
dc.description.abstractSanctions are often ineffective in promoting employee compliance with information systems security policies (ISSPs) and may lead to undesired outcomes. We establish that ISSP compliance is an ethical decision and examine it through the lens of ethical decision-making using scenario-based surveys. Guided by normative ethical theories and the construal level theory, we find that both the opinions of co-workers and perceived negative consequences of noncompliance to the organization influence employee ISSP compliance intention. Additionally, perceived social distance affects employees’ assessment of when damages to the organization can occur. Both the assessed timing of damage and the perceived social distance from the organization influence employees’ judgment of potential damages from security breaches resulting from noncompliance. To improve compliance, we recommend organizations align employee compliance motivation with organizational security interests through clear communications of potential security breach damages, fostering a pro-compliance culture, and reducing the psychological distance employees feel from the organization.
dc.format.extent10
dc.identifier.doi10.24251/HICSS.2025.739
dc.identifier.isbn978-0-9981331-8-8
dc.identifier.other0c0aabaf-f623-438b-a3e9-1702f2518ee7
dc.identifier.urihttps://hdl.handle.net/10125/109587
dc.relation.ispartofProceedings of the 58th Hawaii International Conference on System Sciences
dc.rightsAttribution-NonCommercial-NoDerivatives 4.0 International
dc.rights.urihttps://creativecommons.org/licenses/by-nc-nd/4.0/
dc.subjectOrganizational Cybersecurity: Advanced Cyber Defense, Cyber Analytics, and Security Operations
dc.subjectconstrual level theory, ethics, information security policy compliance, moral intensity, psychological distance
dc.titleMoral Intensity Dimensions of Information Security Policy Compliance: Perspectives of Construal Level Theory and Ethical Theories
dc.typeConference Paper
dc.type.dcmiText
prism.startingpage6176

Files

Original bundle
Now showing 1 - 1 of 1
Thumbnail Image
Name:
0604.pdf
Size:
439.39 KB
Format:
Adobe Portable Document Format
Download

Collections

Organizational Cybersecurity: Advanced Cyber Defense, Cyber Analytics, and Security Operations