Purpose
Employee security behaviors are the cornerstone for achieving holistic organizational information security. Recent studies in the information systems (IS) security literature have used neutralization and moral disengagement (MD) perspectives to examine employee rationalizations of noncompliant security behaviors. Extending this prior work, the purpose of this paper is to identify mechanisms of security education, training, and awareness (SETA) programs and deterrence as well as employees’ organizational commitment in influencing MD of security policy violations and develop a theoretical model to test the proposed relationships.
Design/methodology/approach
The authors validate and test the model using the data collected from six large multinational organizations in Korea using survey-based methodology. The model was empirically analyzed by structural equation modeling.
Findings
The results suggest that security policy awareness (PA) plays a central role in reducing MD of security policy violations and that the certainty of punishment and immediacy of enforcing penalties are instrumental toward reducing such MD; however, the higher severity of penalties does not have an influence. The findings also suggest that SETA programs are an important mechanism in creating security PA.
Originality/value
The paper expands the literature in IS security that has examined the role of moral evaluations. Drawing upon MD theory and social cognitive theory, the paper points to the central role of SETA and security PA in reducing MD of security policy violations, and ultimately the likelihood of this behavior. The paper not only contributes to theory but also provides important insights for practice.
Purpose -This study provides appropriate procedures for EFA to help researchers conduct empirical studies by using PLS-SEM. Research design, data, and methodology -This study addresses the absolute and relative sample size criteria, sampling adequacy, factor extraction models, factor rotation methods, the criterion for the number of factors to retain, interpretation of results, and reporting information. Results -The factor analysis procedure for PLS-SEM consists of the following five stages. First, it is important to look at whether both the Bartlett test of sphericity and the KMO MSA meet the qualitative criteria. Second, PAF is a better choice of methodology. Third, an oblique technique is a suitable method for PLS-SEM. Fourth, a combined approach is strongly recommended to factor retention. PA should be used at the onset. Next, it is recommended using the K1 criterion. In addition, it is necessary to extract factors that increase the total variance explanatory power through the PVA-FS. Finally, it is appropriate to select an item with a factor loading into 0.5 or higher and a communality of 0.5. Conclusions -It is expected that the accurate factor analysis processed for PLS-SEM as previously presented will help us extract more precise factors of the structural model.
scite is a Brooklyn-based organization that helps researchers better discover and understand research articles through Smart Citations–citations that display the context of the citation and describe whether the article provides supporting or contrasting evidence. scite is used by students and researchers from around the world and is funded in part by the National Science Foundation and the National Institute on Drug Abuse of the National Institutes of Health.