Antecedents of information security policy compliance by employees

Today, organizations’ heavy reliance on their information systems (IS) for improving their productivity and also getting competitive advantage in the market. This requiresthem to manage the risks associated with those systems. The literature agrees that risks related to information security area major challenge for many organizations, since these risksmay have terrible consequences, including corporate liability, loss of credibility and monetary damage. Organizations try todeploy information security policies (ISP) to ensure the security of the information sources in the organization.However, the successful of these policies deployment is depending on the employees’ compliance with these policies. There are evidences that the major threat to IS security isconstituted by careless employees who do not comply with organizations’ IS security policies and procedures. This studyis an attempt to investigate the antecedents of employees’ compliance with ISP and to identify the relationship betweenthem.

Keywords:

Information Security , Policy Compliance , Information Security Management , Information Security Awareness