eprintid: 12659
rev_number: 2
eprint_status: archive
userid: 1
dir: disk0/00/01/26/59
datestamp: 2023-11-10 03:27:13
lastmod: 2023-11-10 03:27:13
status_changed: 2023-11-10 01:49:13
type: article
metadata_visibility: show
creators_name: Ali, R.F.
creators_name: Dominic, P.D.D.
creators_name: Ali, K.
title: Organizational governance, social bonds and information security policy compliance: a perspective towards oil and gas employees
ispublished: pub
keywords: compliance; governance approach; information system; literature review; organizational framework; questionnaire survey; security
note: cited By 15
abstract: Information security attacks on oil and gas (O&G) organizations have increased since the last decade. From 2015 to 2019, almost 70 percent of O&G organizations faced at least one significant security breach worldwide. Research has shown that 43 percent of security attacks on O&G organizations occur due to the non-compliant behavior of O&G employees towards information security policy. The existing literature provides multiple solutions for technical security controls of O&G organizations. However, there are very few studies available that address behavioral security controls, specifically for O&G organizations of developing countries. The purpose of this study is to provide a comprehensive framework for information security policy compliance (ISPC) for the O&G sector. A mixed-method approach is used to develop the research framework. Semi-structured interviews from O&G specialists refined the developed framework. Based on qualitative study a survey questionnaire was developed. To evaluate the research framework, structural equation modeling was applied to a sample of 254 managers/executives from 150 Malaysian O&G organizations. The obtained test results confirmed the proposed research model, according to which good social bonding among employees plays a critical role in improving ISPC. However, there was less support for the notion that all organizational governance factors significantly improve the social bonding of Malaysian O&G organizations employees. This paper contributes to the current information system (IS) literature by exploring the interrelationships among organizational governance, social bonding, and information security policy compliance (ISPC) in Malaysian O&G organizations. © 2020 by the authors. Licensee MDPI, Basel, Switzerland.
date: 2020
publisher: MDPI
official_url: https://www.scopus.com/inward/record.uri?eid=2-s2.0-85092897986&doi=10.3390%2fsu12208576&partnerID=40&md5=bac10b9c3e264074b051f7842863af9e
id_number: 10.3390/su12208576
full_text_status: none
publication: Sustainability (Switzerland)
volume: 12
number: 20
pagerange: 1-27
refereed: TRUE
issn: 20711050
citation:   Ali, R.F. and Dominic, P.D.D. and Ali, K.  (2020) Organizational governance, social bonds and information security policy compliance: a perspective towards oil and gas employees.  Sustainability (Switzerland), 12 (20).  pp. 1-27.  ISSN 20711050