scholarly journals Power Distance as a Variable in Assessing Employees' Behavior towards Information Security Policy Compliance in a High-Power Distance Society: An Exploratory Study

Author(s):  
Erasmus Etim ◽  
Kevin Streff ◽  
Insu Park ◽  
Pam Rowland

Information security is a concern of every business, therefore the need for employees to comply with a policy that would protect the organization's assets.  The model developed for this research was based on Protection Motivation Theory, Theory of Planned Behavior, and Rational Choice Theory.  There were 129 responses from Nigeria used to validate the model.  The data analysis using PLS-SEM resulted in these findings: self-efficacy, normative beliefs, and power distance were significant, therefore impacting.  Therefore, not significant descriptive norms did not positively impact intention to comply with information security policy.  Power distance was impactful on employees' intention to comply with information system policy and contributed to theory and practice; respondents chose to do right by their intention to comply with information security policy.  Training and managerial oversight in policy compliance are significant since those actions would help protect the organization's information.  The analysis showed the adverse effect of a high correlation between indicators of different constructs.

Author(s):  
Canchu Lin ◽  
Anand S. Kunnathur ◽  
Long Li

Past behavior research overwhelmingly focused on information security policy compliance and under explored the role of organizational context in shaping information security behaviors. To address this research gap, this study integrated two threads of literature: organizational culture, and information security behavior control, and proposed a framework that integrates mid-range theories used in empirical research, connects them to organizational culture, and predicts its role in information security behavior control. Consistent with the cultural-fit perspective, this framework shows that information security policy compliance fits hierarchical culture and the approach of promoting positive, proactive, and emerging information security behaviors fits participative culture. Contributions and practical implications of this framework, together with future research directions, are discussed.


Sign in / Sign up

Export Citation Format

Share Document