Research Magazine 2025

SUMMER RESEARCH FELLOWSHIPS

Investigating Information Security Noncompliance as a Local Phenomenon

OVERVIEW

Organizations often have information security policies (ISPs) in place that require employees to follow them. Despite decades of research on the topic, ISP noncompliance remains a problem. We take an alternative approach to examining the factors that underly ISP noncompliance. We argue that ISP noncompliance may be a local phenomenon, rather than a contextualized general phenomenon as treated by the extant literature. On that basis, we focus on identifying and examining the local (unique) factors that solely predict employees’ ISP noncompliance and are not related to other non-ISP-related behaviors (or general organizational policy violations). To identify these factors, we adopt a sequential mixed-method research approach comprising a qualitative study (Study 1) and a quantitative cross-sectional survey (Study 2), and semi-structured interviews for triangulation (Study 3). We hope that this research will contribute to both the information security literature and management practice.

One of the ways that the Coles College encourages faculty research is by offering $10,000 fellowships each summer to new, junior, and senior faculty. Read on to learn more about the projects that Coles College faculty members will be working on throughout Summer 2025.

TAKEAWAYS ISP noncompliance behavior has its own features and uniqueness, compared to normal policy violation. We uncovered factors that primarily predict employees’ ISP violation behavior. A sequential multi-study mixed-method research approach was adopted.

Botong Xue

29

Made with FlippingBook - Online catalogs