Need for information security policies compliance: A perspective in Higher Education Institutions

Organizations profoundly rely on contemporary information systems as they store essential business and resources data. Security of these information systems is critically handled by applying both technical and behavioral controls. However, security culture in certain organizations such as Higher Edu...

Full description

Main Authors: Hina, S., Dominic, D.D.
Format: Article
Institution: Universiti Teknologi Petronas
Record Id / ISBN-0: utp-eprints.20041 /
Published: IEEE Computer Society 2017
Online Access: https://www.scopus.com/inward/record.uri?eid=2-s2.0-85029946171&doi=10.1109%2fICRIIS.2017.8002439&partnerID=40&md5=0425435235d19c46c893e8b213c39a1c
http://eprints.utp.edu.my/20041/
Tags: Add Tag
No Tags, Be the first to tag this record!
id utp-eprints.20041
recordtype eprints
spelling utp-eprints.200412018-04-22T14:38:30Z Need for information security policies compliance: A perspective in Higher Education Institutions Hina, S. Dominic, D.D. Organizations profoundly rely on contemporary information systems as they store essential business and resources data. Security of these information systems is critically handled by applying both technical and behavioral controls. However, security culture in certain organizations such as Higher Education Institutions (HEI) is questionable due to the lax attitude of employees towards the institutional resources. This research intends to examine the effect of institutional governance (IG) factors security awareness programs, establishment of security policies and periodic monitoring in enhancing the protection motivation among employees. It is believed that employees motivated, through various sources of information, towards the protection of resources intend to comply with organizational Information Security Policies (ISP) documented to disseminate the roles and responsibilities of employees. The two relevant theories i.e. Protection Motivation Theory (PMT) and Theory of Planned Behavior (TPB) are integrated for this research. The effect of IG and negative experience, as external sources of information, is investigated on the integrated theories. Relevant hypotheses are formulated in the proposed hybrid research model. To pilot test the survey questionnaire, data collection was done among the employees within the HEI of Malaysia. Results were derived using IBM SPSS 23. Pilot study shows reliable measurement scales, suitable for final data collection and analysis to validate the research model. © 2017 IEEE. IEEE Computer Society 2017 Article PeerReviewed https://www.scopus.com/inward/record.uri?eid=2-s2.0-85029946171&doi=10.1109%2fICRIIS.2017.8002439&partnerID=40&md5=0425435235d19c46c893e8b213c39a1c Hina, S. and Dominic, D.D. (2017) Need for information security policies compliance: A perspective in Higher Education Institutions. International Conference on Research and Innovation in Information Systems, ICRIIS . http://eprints.utp.edu.my/20041/
institution Universiti Teknologi Petronas
collection UTP Institutional Repository
description Organizations profoundly rely on contemporary information systems as they store essential business and resources data. Security of these information systems is critically handled by applying both technical and behavioral controls. However, security culture in certain organizations such as Higher Education Institutions (HEI) is questionable due to the lax attitude of employees towards the institutional resources. This research intends to examine the effect of institutional governance (IG) factors security awareness programs, establishment of security policies and periodic monitoring in enhancing the protection motivation among employees. It is believed that employees motivated, through various sources of information, towards the protection of resources intend to comply with organizational Information Security Policies (ISP) documented to disseminate the roles and responsibilities of employees. The two relevant theories i.e. Protection Motivation Theory (PMT) and Theory of Planned Behavior (TPB) are integrated for this research. The effect of IG and negative experience, as external sources of information, is investigated on the integrated theories. Relevant hypotheses are formulated in the proposed hybrid research model. To pilot test the survey questionnaire, data collection was done among the employees within the HEI of Malaysia. Results were derived using IBM SPSS 23. Pilot study shows reliable measurement scales, suitable for final data collection and analysis to validate the research model. © 2017 IEEE.
format Article
author Hina, S.
Dominic, D.D.
spellingShingle Hina, S.
Dominic, D.D.
Need for information security policies compliance: A perspective in Higher Education Institutions
author_sort Hina, S.
title Need for information security policies compliance: A perspective in Higher Education Institutions
title_short Need for information security policies compliance: A perspective in Higher Education Institutions
title_full Need for information security policies compliance: A perspective in Higher Education Institutions
title_fullStr Need for information security policies compliance: A perspective in Higher Education Institutions
title_full_unstemmed Need for information security policies compliance: A perspective in Higher Education Institutions
title_sort need for information security policies compliance: a perspective in higher education institutions
publisher IEEE Computer Society
publishDate 2017
url https://www.scopus.com/inward/record.uri?eid=2-s2.0-85029946171&doi=10.1109%2fICRIIS.2017.8002439&partnerID=40&md5=0425435235d19c46c893e8b213c39a1c
http://eprints.utp.edu.my/20041/
_version_ 1741196306632671232
score 11.62408