Exploratory Factor Analysis of User’s Compliance Behaviour towards Health Information System’s Security

Abstract

One of the main problems in information security was human error due to improper human behaviour. Therefore, this preliminary study was conducted with aims to identify possible factors that can affect user's compliance behaviour towards information security in terms of two aspects: management support and security technology. Two theories were integrated for development of research framework: I) Theory of Planned Behaviour; II) Theory of Acceptance Model. The respondents of this study were the health professionals and IT officers whereby 42 questionnaires were obtained and verified. Exploratory Factor Analysis (EFA) results revealed that the six factors were obtained: Transactional_Lead-ership_Style, Transformational_Leadership_Style, ISP_Training_Support, PU_Security, PU_Security-Countermeasure and PEOU_ISPs. The higher loadings signalled the correlations of the indicated items with the factors on which they were loaded with each of the correspondence factors achieving score of alpha value above 0.80. According to the descriptive analysis, most of the respondents are agreed with all the indicated factors. The preliminary study facilitates researcher in developing new model that integrates TPB and TAM that can be used to increase knowledge of user's compliance behaviour towards health information system's security.

Information Security Behavior and Information Security Policy Compliance: A Systematic Literature Review for Identifying the Transformation Process from Noncompliance to Compliance

“…They proposed a research model to evaluate computer security behaviors and concluded that organizational norms, moral obligation, and attitude toward computer security behavior have significant effects on employees' behavioral intentions. Reference [70] worked on health information systems. They developed a behavioral ISPC framework for health employees.…”

“…Organizational norms, moral obligations, and attitude toward the computer and security behavior have significant effects on employees' behavioral intentions [70] The quantitative research methodology was adopted. SPSS used for data analysis The psychological contract is an essential factor, and it affects ISP compliance intention significantly [74] The quantitative research approach adopted and PLS used for data and hypothesis analysis Employees seek help and guidance from their social circle, and they often adopt behaviors from their peers or coworkers.…”

“…Theory Used Influencing Factors [8] General Deterrence Theory Perceived legitimacy, perceived value congruences, perceived severity, perceived certainty [59] TPB, Self-Determination and Organismic Integration Theory General motivations (locus of control) and situational motivations [60] PMT, TPB Social influence, response efficacy, self-efficacy [14] PMT, TPB Perceived vulnerability, response efficacy, self-efficacy, attitude, subjective norms. [61] PMT Habit, rewards, vulnerability, perceived severity [37] PMT Criticality [24] PMT Fear and protection motivation [62] PMT Fear and protection motivation [54] PMT Continues intention, perceived extraneous circumstances [63] PMT Hope, optimism, self-efficacy, resilience, fear, and protection motivation [64] PMT Response efficacy and response cost [65] PMT Responsibility, OCB, psychological ownership, and protection motivation [66] PMT, Health Belief Model, DT, TRA Self-efficacy and impact [45] Ethical Decision-Making Model, and Value Congruence Theory Moral beliefs [27] PMT, TPB, GDT, and OT Vulnerability, self-efficacy, response efficacy, response-cost [16] TRA, TPB Knowledge, value, skills, culture [49] TPB Top management, culture, attitude, perceived compliance control, subjective norms [46] Social Exchange Theory Job satisfaction, perceived organizational support, and security culture [68] PMT Knowledge and protection motivation [47] PMT, TPB Awareness, subjective norms, attitude, perceived behavioral control [52] PMT and Health Belief Model Security systems, security education, security visibility [17] TPB Security awareness, intention to confirm early [48] Theory of Organizational Behavior and Strategic Management Theory Discipline and agility [69] PMT Moral obligations, attitude [70] TPB and Theory of Acceptance Model Leadership, training, and perceived usefulness of security [71] TPB and Health Believe Model Management, awareness, working experience [72] TPB Status (rank), perceived behavioral control [73] RCT Psychological contract, perceived cost, perceived b...…”

Predictive Validity of a Cybercrime Awareness Tool: The Case of Senior High School Students in a Philippine Secondary School

“…Using principal component analysis thru Varimax rotation methods, the factor analysis yielded a four-factor solution (eigenvalues greater than 1), which explained approximately 65% of the total variance. All 18 statements were included since their factor loading is greater than .400 (Humaidi & Balakrishnan, 2013).…”

Aceptación y uso de los sistemas e-learning por estudiantes de Grado de Ecuador: El caso de una universidad estatal

“…El TAM y sus versiones han dado pauta para el desarrollo de otras investigaciones que han permitido: la réplica de TAM, las pruebas de sus proposiciones y las posibles limitaciones; la comparación de TAM con otros modelos como la teoría de la conducta planificada (TPB) (Humaidi, 2013;Williams, Nripendra & Dwived, 2015); la adaptación de TAM para diversas configuraciones tales como escenarios obligatorios, diferentes aplicaciones y culturas; y,extensión del modelo para incluir otras variables , como es el caso del presente estudio.…”