Is defined as the preventative effect that actual or threatened punishment has on potential offenders.
Published in Chapter:
Factors Influencing Information Security Policy Compliance Behavior
Kwame Simpe Ofori (School of Management and Economics, University of Electronic Science and Technology of China, China), Hod Anyigba (Nobel International Business School, Ghana), George Oppong Appiagyei Ampong (Department of Management, Ghana Technology University College, Ghana), Osaretin Kayode Omoregie (Department of Finance, Lagos Business School, Pan-Atlantic University, Nigeria), Makafui Nyamadi (Department of Operations and Information Systems, Business School, University of Ghana, Ghana), and Eli Fianu (Ghana Technology University College, Ghana)
Copyright: © 2020
|Pages: 20
DOI: 10.4018/978-1-7998-3149-5.ch010
Abstract
One of the major concerns of organizations in today's networked world is to unravel how employees comply with information security policies (ISPs) since the internal employee has been identified as the weakest link in security policy breaches. A number of studies have examined ISP compliance from the perspective of deterrence; however, there have been mixed results. The study seeks to examine information security compliance from the perspective of the general deterrence theory (GDT) and information security climate (ISC). Data was collected from 329 employees drawn from the five top-performing banks in Ghana and analyzed with PLS-SEM. Results from the study show that security education training and awareness, top-management's commitment for information security, and peer non-compliance behavior affect the information security climate in an organization. Information security climate, punishment severity, and certainty of deterrent were also found to influence employees' intention to comply with ISP. The implications, limitations, and directions for future research are discussed.