Do employees in a “good” company comply better with information security policy? A corporate social responsibility perspective
- Authors
- Kim, H.L.; Han, J.
- Issue Date
- Aug-2019
- Publisher
- Emerald Group Publishing Ltd.
- Keywords
- Cost-benefit analysis; Information management; IT policy; IT regulation; Partial least squares; Security
- Citation
- Information Technology and People, v.32, no.4, pp 858 - 875
- Pages
- 18
- Journal Title
- Information Technology and People
- Volume
- 32
- Number
- 4
- Start Page
- 858
- End Page
- 875
- URI
- https://scholarworks.bwise.kr/cau/handle/2019.sw.cau/3283
- DOI
- 10.1108/ITP-09-2017-0298
- ISSN
- 0959-3845
1758-5813
- Abstract
- Purpose: The purpose of this paper is to investigate the impact of corporate social responsibility (CSR) on employees’ compliance behavior concerning information security policy (ISP). A research model includes CSR activities as an antecedent of ISP compliance and as a mediator of the relationship between ISP compliance intention and the perceived costs of compliance. Design/methodology/approach: In total, 162 respondents were surveyed from organizations with more than 500 employees. This study used partial least squares (SmartPLS 3.0) to analyze and examine hypotheses. Findings: The results show CSR’s influence as a mediator in the context of ISP compliance. In particular, moral CSR can affect employees’ ISP compliance intention positively and fully mediate the relationship between the costs of compliance and ISP compliance intention. Employees would like to comply with ISP when they recognize the benefits of ISP compliance and the costs of ISP noncompliance. Originality/value: This study examines influential factors on ISP compliance considering cost-benefit factors from rational choice theory. Moreover, the study contributes to ISP compliance research by being the first attempt to consider CSR in an ISP compliance research context. The results provide insights on how to strategically implement CSR activities in terms of organizational information security. © 2018, Emerald Publishing Limited.
- Files in This Item
- There are no files associated with this item.
- Appears in
Collections - College of ICT Engineering > School of Convergence and Liberal Arts > 1. Journal Articles
![qrcode](https://api.qrserver.com/v1/create-qr-code/?size=55x55&data=https://scholarworks.bwise.kr/cau/handle/2019.sw.cau/3283)
Items in ScholarWorks are protected by copyright, with all rights reserved, unless otherwise indicated.