TY - GEN
T1 - Understanding the roles of challenge security demands, psychological resources in information security policy noncompliance
AU - Li, Ying
AU - Zhang, Nan
AU - Pan, Ting
N1 - Publisher Copyright:
© PACIS 2018.
PY - 2018
Y1 - 2018
N2 - It is widely agreed that employees' noncompliance with information security policies (ISP) is still a major problem for organizations. In order to understand the factors that reduce employees' ISP noncompliance, previous studies have focused on stressful security demands that consequently aggravate noncompliance, and tangible job resources to promote compliance. However, how security demands encourage employees to comply and how intangible resources affect employees' ISP noncompliance have been largely overlooked. In this study, we posit and argue that challenge security demands and intangible psychological resources can help promote employees' ISP compliance. Drawing on the Job Demands-Resources Model and the theory of psychological resource, we specifically examine the roles of continuity demand, mandatory demand as challenge security demands, and felt trust, professional development and personal resource as psychological resources in influencing employees' ISP noncompliance. The proposed model is validated by survey data from 224 employees. The theoretical and practical contributions are also discussed.
AB - It is widely agreed that employees' noncompliance with information security policies (ISP) is still a major problem for organizations. In order to understand the factors that reduce employees' ISP noncompliance, previous studies have focused on stressful security demands that consequently aggravate noncompliance, and tangible job resources to promote compliance. However, how security demands encourage employees to comply and how intangible resources affect employees' ISP noncompliance have been largely overlooked. In this study, we posit and argue that challenge security demands and intangible psychological resources can help promote employees' ISP compliance. Drawing on the Job Demands-Resources Model and the theory of psychological resource, we specifically examine the roles of continuity demand, mandatory demand as challenge security demands, and felt trust, professional development and personal resource as psychological resources in influencing employees' ISP noncompliance. The proposed model is validated by survey data from 224 employees. The theoretical and practical contributions are also discussed.
KW - Challenge security demands
KW - Information security policy noncompliance
KW - Job demands-resources model
KW - Personal resource
KW - Psychological resources
UR - https://www.scopus.com/pages/publications/85089230003
M3 - 会议稿件
AN - SCOPUS:85089230003
T3 - Proceedings of the 22nd Pacific Asia Conference on Information Systems - Opportunities and Challenges for the Digitized Society: Are We Ready?, PACIS 2018
BT - Proceedings of the 22nd Pacific Asia Conference on Information Systems - Opportunities and Challenges for the Digitized Society
A2 - Tanabu, Motonari
A2 - Senoo, Dai
PB - Association for Information Systems
T2 - 22nd Pacific Asia Conference on Information Systems - Opportunities and Challenges for the Digitized Society: Are We Ready?, PACIS 2018
Y2 - 26 June 2018 through 30 June 2018
ER -