Factors influencing information security compliance: an institutional perspective

Abstract

Information is the critical resource of modern organization that needs to be protected from both internal and external threats so as to sustain in this competitive business environment. In order to do so, comprehensive security policy must be formulated and implemented. Every employee of the organization must comply with the organization’s security policy. Although organizations implement information security policy, it is commonly observed that employees do not comply with the organization information security policy. The purpose of this research was to identify organizational factors that shape employees behavior to comply with information system security policy in Ethio-telecom. Data were collected via using survey method. Multiple linear regression was used as data analysis method. The study result showed that management support, awareness and training, and accountability are leading organizational factors that shape employees behavior to comply with the existing information system security policy. This is a single case study; it cannot be generalized for other organizations. Other researchers can replicate this research for generalizability of the research findings across different contexts.

Efficacy and Security Effectiveness: Key Parameters in Evaluation of Network Security

“…For ensuring comprehensive protection, comprehensive security policy is a must and has to be formulated and implemented [4]. There are many guidelines and standards organisations follow for Information Security Management.…”

“…With more and more organisations adopting Information technology networks for business enhancements, the attacks on these Information technology networks, and resources have also increased. Information is a critical resource of every organization which needs to be protect from both internal and external threats [4]. Information Security threats in any organisation occur during storage, processing, and communication of information [5].…”

Information Systems Security Threats and Vulnerabilities: A Case of the Institute of Accountancy Arusha (IAA)

“…Evidently, safe supporting infrastructure and accompanying resources are necessary for information system reliability [2] [3] [20]. Nevertheless, according to reference [20] and [21], a number of factors influence the necessary level of online safety in eliminating information system security threats and vulnerabilities. These variables include administrative, technological, and human-related variables.…”