Determinants of Compliance With Information Systems Security Controls

Abstract

The purpose of this study is to determine the factors that critically contribute to employees of an organization complying with the information security controls that have been set in place. Whether it is an attitude or an intention that leads to complying, this chapter looks at the theory of planned behavior (TPB). A company was chosen, and a questionnaire was handed out to the employees. The questionnaire distributed focuses only on the elements that are within the theory of planned behavior model. The questionnaire is anonymous, and because of this, the confidence and confidentiality are given. As a result of these two factors, it was seen that the elements of the chosen model are not 100% the contributing factor as to why employees comply with information security controls within Company X. It is therefore implied that more research has to be done to figure out what exactly makes the employees comply.