Narratives and Information Security Policy Compliance: A Narrative Policy Framework Perspective

Presenter Information

Abdullah Al Nuaim, University of Colorado DenverFollow
Ronald Ramirez, University of Colorado DenverFollow
Ersin Dincelli, University of Colorado DenverFollow

Paper Type

ERF

Abstract

Employees represent the weakest link in the information security ecosystem. Information security researchers have examined the effect of individual, organizational, and social factors on employees’ compliance with information security policies. Among the organizational factors, implementing security awareness programs is found to be the most effective measure to mitigate human error. While it has been suggested that using narratives in security awareness programs increases their effectiveness, the literature lacks appropriate empirical examination of different elements that constitutes effective narratives. This study aims to bridge this gap by examining the effects of using narratives, in particular the portrayal of characters, and their congruence with the firm's market orientation in security awareness messages under the lens of the narrative policy framework. We expect the findings of this study will contribute to practice by shedding light on the use of narratives informed by an organization’s strategic market orientation, in improving security awareness campaigns.

Recommended Citation

Al Nuaim, Abdullah; Ramirez, Ronald; and Dincelli, Ersin, "Narratives and Information Security Policy Compliance: A Narrative Policy Framework Perspective" (2020). AMCIS 2020 Proceedings. 32.
https://aisel.aisnet.org/amcis2020/info_security_privacy/info_security_privacy/32