Promoting employees' information security vigilance by enhancing awareness: the roles of organizational climate and deterrence measures

초록

This research examines how employees' awareness of information security affects vigilance behaviors in the cultural context of South Korea. In particular, how organizational information security culture shapes employees' perceptions and actions is investigated based on D'Arcy and Greene's (Inform Manag Comput Secur 22(5):474-489, 2014) dimensions of information security. An online survey was administered to a sample of South Korean graduate students who were full-time employees of businesses of various sizes and sectors. Structural equation modeling was employed to assess how the dimensions of information security culture differentially affected employees' awareness and vigilance. Findings indicated that awareness was the strongest predictor of vigilance while communication, commitment, feedback, and monitoring increased employees' awareness. Additionally, communication was shown to impact vigilance directly as well. Policy implications and future research directions are discussed based on the findings.

키워드