A Conceptual Model for Promoting Information Security Policy Compliance Behaviour at Workplace

Diman, Allen Peter and T.K.A, Rahman (2024) A Conceptual Model for Promoting Information Security Policy Compliance Behaviour at Workplace. International Journal of Business and Technology Management, 6 (2). pp. 324-337.

Text 27276-1318-91933-1-10-20240802.pdf Download (183kB)

Abstract

Securing sensitive and critical information is a significant challenge for many organisations, as leaks can cause financial, reputational, and competitiveness losses. Organisations can implement an Information Security Policy (ISP) that employees must comply with to minimise this risk. However, ensuring compliance with the ISP continues to be a problem. To address this issue, a conceptual model has been proposed that organisations can use to promote ISP compliance behaviour among their employees. The Health Action Process Approach (HAPA) Model is used to derive this model. The model consists of two phases -motivational and volitional which are expected to cover the elements needed to promote behavioural change for ISP compliance. The model's multi-processes approach, covering critical aspects such as risk assessment, self-efficacy, initiation, and maintenance, enables it to serve as a platform for organisations to sustain ISP compliance over the long term. Organisations can conduct employee assessments and provide ISP compliance training and awareness campaigns to implement the model. They can also disseminate cues about information security issues and how the ISP can assist employees in handling them, discourage behaviour that leads to complacency towards ISP compliance, and update the ISP to keep it relevant. The proposed model presents an opportunity for future research to evaluate its applicability in organisational settings.

Item Type:	Journal
Uncontrolled Keywords:	Information security, Information Security Policy, Health Action Process Approach Model, Self-efficacy, Compliance
Divisions:	School of Graduate Studies
Depositing User:	Muhamad Aizat Nazmi Mohd Nor Hamin
Date Deposited:	06 May 2025 03:13
Last Modified:	06 May 2025 03:13
URI:	http://ur.aeu.edu.my/id/eprint/1338

Actions (login required)

View Item