Motivating information security policy compliance: The critical role of supervisor-subordinate guanxi and organizational commitment

The moderating effects of perceived social worth and organizational virtuousness on the relationship between emotional labor, precarious work, and organizational commitment among ASHA workers in India

Accredited Social Health Activists (ASHAs) in India are the subjects of this study, which explores the complex relationships between emotional labor (EL) and unstable work environments and how these relationships affect organizational commitment (OC). The study also looked at how organizational virtuousness (OV) and perceived social value mediated the relationship between precarious work (PW), EL, and OC. This study included a total sample size of N = 467 ASHA personnel from a variety of healthcare settings. Hierarchical regression analysis was used to look at the moderating effects using the Hayes Process Macro. The findings suggest that there are noteworthy negative associations between EL, PW, and the OC of ASHA workers. Nevertheless, OV and perceived social worth (PSW) emerged as significant moderators. More precisely, elevated levels of PSW and OV mitigated the adverse effects of PW and EL on the OC of ASHA workers.

Investigation of information security policy violations among oil and gas employees: A security-related stress and avoidance coping perspective

Information security is one of the most crucial considerations in digitising Oil and Gas (O&G) organisations. For ensuring information security policy compliance, O&G organisations enforce heavy security requirements. The purpose of this article is to assess how O&G employees cope with stressful information security tasks and how security-related stress (SRS) is related to information security policy violations among O&G employees in developing countries. Based on the coping theory, this article develops a theoretical framework to examine O&G employees’ intention to violate information security policies. The framework is tested using a survey of 270 managers/executives from 150 Malaysian O&G organisations. The results indicated that O&G employees perceive security requirements as stressful to follow and adopt avoidance coping strategies that lead them to violate organisational information security policies. For practitioners, the study findings demonstrate the prevalence of technostress in O&G organisations and suggest alternative mechanisms to address the stressful effects of information security requirements. This article contributes to the information system security literature by testing procrastination and psychological detachment with SRS in the context of developing countries' O&G organisations’ employees and provides an understanding of how O&G employees adopt avoidance coping.

The determinants of an information security policy compliance culture in organisations: the combined effects of organisational and behavioural factors

Purpose

This paper aims to examine the individual and combined effects of organisational and behavioural factors on employees’ attitudes and intentions to establish an information security policy compliance culture (ISPCC) in organisations.

Design/methodology/approach

Based on factors derived from the organisational culture theory, social bond theory and accountability theory, a testable research model was developed and evaluated in an online survey that involves the use of a questionnaire to collect quantitative data from 313 employees, from ten different organisations in Ghana. The data collected were analysed using the partial least squares-structural equation modelling approach, involving the measurement and structural model tests.

Findings

The study reveals that the individual measures of accountability – identifiability (2.4%), expectations of evaluation (38.8%), awareness of monitoring (55.7%) and social presence (−41.2%) – had weak to moderate effects on employees’ attitudes towards information security policy compliance. However, the combined effect showed a significant influence. In addition, organisational factors – supportive organisational culture (15%), security compliance leadership (2%) and user involvement (63%) – showed positive effects on employees’ attitudes. Further, employees’ attitudes had a substantial influence (65%), while behavioural intentions demonstrated a weak effect (24%) on the establishment of an ISPCC in the organisation. The combined effect also had a substantial statistical influence on the establishment of an ISPCC in the organisation.

Practical implications

Given the findings of the study, information security practitioners should implement organisational and behavioural factors that will have an impact on compliance, in tandem, with the organisational effort to build a culture of compliance for information security policies.

Originality/value

The study provides new insights on how to address the problem of non-compliance with regard to the information security policy in organisations through the combined application of organisational and behavioural factors to establish an information security policy compliance culture, which has not been considered in any past research.

How Supervisor-Subordinate Guanxi Influence Employee Innovative Behavior: A Moderated Mediation Model

Purpose

In the practice of inspiring employees’ innovative behavior (IB), managers often pay attention to the role of policies, capitals, incentive measures, equipment and other factors, while ignoring the role of the relationship between leaders and employees. Based on social exchange theory and conservation of resources theory, this paper is to examine the mediating role of job satisfaction (JS) and organizational commitment (OC) in the relationship between supervisor–subordinate guanxi (SSG) and employee IB, and the moderating role of psychological safety (PS) in the series mediation model between SSG and employee IB.

Patients and Methods

Cross-sectional data came from 207 employees of Chinese scientific and technological enterprises. The participants completed the SSG scale, JS scale, OC scale, IB scale, and PS scale. SPSS PROCESS macro was used to test the research hypothesis.

Results

SSG was positively associated with employee IB. SSG can not only influence IB through JS or OC (SSG→JS→IB; SSG→OC→IB) but also influence IB through JS and OC (SSG→JS→OC→IB). PS moderated the joint mediating effects between SSG and IB (SSG→JS→OC→IB).

Conclusion

To stimulate employees’ IB within an enterprise can pay attention to the relationship between leaders and employees, improve employee JS, and strengthen employee OC. The lower the PS, the stronger the joint mediation effects between SSG and employee IB. Therefore, leaders should also pay attention to employees with high PS to avoid the counterproductive effect of cultivating SSG.

Information Security Behavior and Information Security Policy Compliance: A Systematic Literature Review for Identifying the Transformation Process from Noncompliance to Compliance

A grave concern to an organization’s information security is employees’ behavior when they do not value information security policy compliance (ISPC). Most ISPC studies evaluate compliance and noncompliance behaviors separately. However, the literature lacks a comprehensive understanding of the factors that transform the employees’ behavior from noncompliance to compliance. Therefore, we conducted a systematic literature review (SLR), highlighting the studies done concerning information security behavior (ISB) towards ISPC in multiple settings: research frameworks, research designs, and research methodologies over the last decade. We found that ISPC research focused more on compliance behaviors than noncompliance behaviors. Value conflicts, security-related stress, and neutralization, among many other factors, provided significant evidence towards noncompliance. At the same time, internal/external and protection motivations proved positively significant towards compliance behaviors. Employees perceive internal and external motivations from their social circle, management behaviors, and organizational culture to adopt security-aware behaviors. Deterrence techniques, management behaviors, culture, and information security awareness play a vital role in transforming employees’ noncompliance into compliance behaviors. This SLR’s motivation is to synthesize the literature on ISPC and ISB, identifying the behavioral transformation process from noncompliance to compliance. This SLR contributes to information system security literature by providing a behavior transformation process model based on the existing ISPC literature.