Publication:
Determinants of Information Security Awareness and Behaviour Strategies in Public Sector Organizations Among Employees

Thumbnail Image

Files

Determinants of Information Security Awareness and Behaviour Strategies in Public Sector Organizations among Employees.pdf (738.56 KB)

Date

2022

Authors

Journal Title

Journal ISSN

Volume Title

Publisher

Science and Information (SAI) Organization

Research Projects

Organizational Units

Journal Issue

Abstract

In this digital era, protecting an organisation's sensitive information system assets against cyberattacks is challenging. Globally, organisations spend heavily on information security (InfoSec) technological countermeasures. Public and private sectors often fail to secure their information assets because they depend primarily on technical solutions. Human components create the bulk of cybersecurity incidents directly or indirectly, causing many organisational information security breaches. Employees' information security awareness (ISA) is crucial to preventing poor information security behaviours. Until recently, there was little combined information on how to improve ISA and how investigated factors influencing employees' ISA levels were. This paper proposed a comprehensive theoretical model based on the Protection Motivation Theory, the Theory of Planned Behaviour, the General Deterrence Theory, and Facilitating Conditions for assessing public sector employees' ISA intentions for information security behaviour. Using a survey and the structural equation modelling (SEM) method, this research reveals that the utilised factors are positively associated with actual information security behaviour adoption, except for perceived sanction certainty. The findings suggest that the three theories and facilitating conditions provide the most influential theoretical framework for explaining public sector employees' information security adoption behaviour. These findings support previous empirical research on why employees' information on security behaviours vary. Consistent with earlier research, these psychological factors are just as critical as facilitating conditions in ensuring more significant behavioural intention to engage in ISA activities, ensuring information security behaviour. The study recommends that public-sector organisations invest in their employees' applied information security training.

Description

Volume 13 Issue 8

Keywords

Information security awareness; behaviour strategies; self-administered questionnaire; structural equation modelling (SEM)

Citation

Al-Shanfari I, Warusia Yassin, Nasser Tabook, Roesnita Ismail and Anuar Ismail, “Determinants of Information Security Awareness and Behaviour Strategies in Public Sector Organizations among Employees” International Journal of Advanced Computer Science and Applications(IJACSA), 13(8), 2022. http://dx.doi.org/10.14569/IJACSA.2022.0130855

URI

https://thesai.org/Publications/ViewPaper?Volume=13&Issue=8&Code=IJACSA&SerialNo=55
 https://www.scopus.com/record/display.uri?eid=2-s2.0-85137161005&origin=resultslist&sort=plf-f&src=s&sid=e90cc59958b8e3f63a22d5cf790d37a7&sot=b&sdt=b&s=TITLE-ABS-KEY%28Determinants+of+Information+Security+Awareness+and+Behaviour+Strategies+in+Public+Sector+Organizations+among+Employees%29&sl=99&sessionSearchId=e90cc59958b8e3f63a22d5cf790d37a7
 https://oarep.usim.edu.my/handle/123456789/10659

Collections

Scopus