Introducing a novel integrated model for the adoption of information security awareness through control, prediction, motivation, and deterrence factors: A pilot study

Information security (IS) violations have a negative impact at both organisational and individual levels. Information security awareness (ISA) therefore plays a positive role in ensuring employees adhere to an organisation's security policies. The challenges that arise in protecting the information infrastructure in the Omani public sector are increasing because of a rise in cases of piracy and phishing attempts as well as a lack of adequate ISA among employees. This paper discusses a pilot study from our ongoing research that proposes an integrated model for adopting ISA as an effective method to improve the security behaviour of employees in Omani institutions. This study aims to validate the reliability of research instrument items prior to conducting a main survey on the adoption of the ISA model in Oman. PLS-SEM and SPSS software were used to conduct statistical analyses, which included a skewness test, a correlation analysis, a Cronbach's alpha test, and tests for composite reliability (CR), average variance extracted (AVE), and discriminant validity. Three main theories were utilised in the formation of the integrated ISA model: the theory of planned behaviour (TPB), protection motivation theory (PMT), and general deterrence theory (GDT) - along with two facilitating condition-related constructs: organisational support and communication. The findings indicated that all construct items for all variables have acceptable Cronbach's alpha values, composites reliability, AVE, and discriminant validity. The results of this study reveal that the questions were applicable, subject to one interpretation, to all participants. Hence, this study contributes to the body of ISA literature by discussing ISA in terms of the bases of control, prediction, motivation, and deterrence. This synthesis constitutes a new perspective that enables organisations to better manage the ISA process, particularly in Oman.