relation: https://khub.utp.edu.my/scholars/15032/
title: Information security behavior and information security policy compliance: a systematic literature review for identifying the transformation process from noncompliance to compliance
creator: Ali, R.F.
creator: Dominic, P.D.D.
creator: Ali, S.E.A.
creator: Rehman, M.
creator: Sohail, A.
description: A grave concern to an organization�s information security is employees� behavior when they do not value information security policy compliance (ISPC). Most ISPC studies evaluate compliance and noncompliance behaviors separately. However, the literature lacks a comprehensive understanding of the factors that transform the employees� behavior from noncompliance to compliance. Therefore, we conducted a systematic literature review (SLR), highlighting the studies done concerning information security behavior (ISB) towards ISPC in multiple settings: research frameworks, research designs, and research methodologies over the last decade. We found that ISPC research focused more on compliance behaviors than noncompliance behaviors. Value con-flicts, security�related stress, and neutralization, among many other factors, provided significant evidence towards noncompliance. At the same time, internal/external and protection motivations proved positively significant towards compliance behaviors. Employees perceive internal and external motivations from their social circle, management behaviors, and organizational culture to adopt security�aware behaviors. Deterrence techniques, management behaviors, culture, and information security awareness play a vital role in transforming employees� noncompliance into compliance behaviors. This SLR�s motivation is to synthesize the literature on ISPC and ISB, identifying the behavioral transformation process from noncompliance to compliance. This SLR con-tributes to information system security literature by providing a behavior transformation process model based on the existing ISPC literature. © 2021 by the authors. Licensee MDPI, Basel, Switzerland.
publisher: MDPI AG
date: 2021
type: Article
type: PeerReviewed
identifier:   Ali, R.F. and Dominic, P.D.D. and Ali, S.E.A. and Rehman, M. and Sohail, A.  (2021) Information security behavior and information security policy compliance: a systematic literature review for identifying the transformation process from noncompliance to compliance.  Applied Sciences (Switzerland), 11 (8).   ISSN 20763417     
relation: https://www.scopus.com/inward/record.uri?eid=2-s2.0-85104172028&doi=10.3390%2fapp11083383&partnerID=40&md5=bb4e3a4aee119b1dc1bc8c179fdf6bac
relation: 10.3390/app11083383
identifier: 10.3390/app11083383