eprintid: 12659 rev_number: 2 eprint_status: archive userid: 1 dir: disk0/00/01/26/59 datestamp: 2023-11-10 03:27:13 lastmod: 2023-11-10 03:27:13 status_changed: 2023-11-10 01:49:13 type: article metadata_visibility: show creators_name: Ali, R.F. creators_name: Dominic, P.D.D. creators_name: Ali, K. title: Organizational governance, social bonds and information security policy compliance: a perspective towards oil and gas employees ispublished: pub keywords: compliance; governance approach; information system; literature review; organizational framework; questionnaire survey; security note: cited By 15 abstract: Information security attacks on oil and gas (O&G) organizations have increased since the last decade. From 2015 to 2019, almost 70 percent of O&G organizations faced at least one significant security breach worldwide. Research has shown that 43 percent of security attacks on O&G organizations occur due to the non-compliant behavior of O&G employees towards information security policy. The existing literature provides multiple solutions for technical security controls of O&G organizations. However, there are very few studies available that address behavioral security controls, specifically for O&G organizations of developing countries. The purpose of this study is to provide a comprehensive framework for information security policy compliance (ISPC) for the O&G sector. A mixed-method approach is used to develop the research framework. Semi-structured interviews from O&G specialists refined the developed framework. Based on qualitative study a survey questionnaire was developed. To evaluate the research framework, structural equation modeling was applied to a sample of 254 managers/executives from 150 Malaysian O&G organizations. The obtained test results confirmed the proposed research model, according to which good social bonding among employees plays a critical role in improving ISPC. However, there was less support for the notion that all organizational governance factors significantly improve the social bonding of Malaysian O&G organizations employees. This paper contributes to the current information system (IS) literature by exploring the interrelationships among organizational governance, social bonding, and information security policy compliance (ISPC) in Malaysian O&G organizations. © 2020 by the authors. Licensee MDPI, Basel, Switzerland. date: 2020 publisher: MDPI official_url: https://www.scopus.com/inward/record.uri?eid=2-s2.0-85092897986&doi=10.3390%2fsu12208576&partnerID=40&md5=bac10b9c3e264074b051f7842863af9e id_number: 10.3390/su12208576 full_text_status: none publication: Sustainability (Switzerland) volume: 12 number: 20 pagerange: 1-27 refereed: TRUE issn: 20711050 citation: Ali, R.F. and Dominic, P.D.D. and Ali, K. (2020) Organizational governance, social bonds and information security policy compliance: a perspective towards oil and gas employees. Sustainability (Switzerland), 12 (20). pp. 1-27. ISSN 20711050