Loading...
Paper Type
ERF
Abstract
Organizations conduct Security Education, Training, and Awareness (SETA) programs to ensure that employees adhere to the Information Security Policies (ISP). Despite being aware of the importance of complying with ISP, some employees still violate these policies and employ various neutralization techniques to rationalize their actions. This study proposes a conceptual model to assess how informational, normative, and anti-neutralization communication strategies influence employees' intention to violate ISP in remote and hybrid work environments. Additionally, we suggest that subjective norms moderate the relationship between normative communication and employees' intention to violate ISP, while negative message framing moderates the relationship between informational communication and employees' intention to violate ISP. We posit that the effectiveness of anti-neutralization communication can be enhanced by increasing the persuasiveness of anti-neutralization statements. Investigating the potential differences in these communication strategies in both traditional work-from-office setups and remote working will help organizations adapt and customize their communication content and strategies to achieve optimal effectiveness in diverse work environments.
Paper Number
1725
Recommended Citation
N, Balagopal; Mathew, Saji K; and Sugumaran, Vijayan, "Impact of SETA Communications on Information Security Policy Violations in Remote and Hybrid Working Environments" (2024). AMCIS 2024 Proceedings. 14.
https://aisel.aisnet.org/amcis2024/security/security/14
Impact of SETA Communications on Information Security Policy Violations in Remote and Hybrid Working Environments
Organizations conduct Security Education, Training, and Awareness (SETA) programs to ensure that employees adhere to the Information Security Policies (ISP). Despite being aware of the importance of complying with ISP, some employees still violate these policies and employ various neutralization techniques to rationalize their actions. This study proposes a conceptual model to assess how informational, normative, and anti-neutralization communication strategies influence employees' intention to violate ISP in remote and hybrid work environments. Additionally, we suggest that subjective norms moderate the relationship between normative communication and employees' intention to violate ISP, while negative message framing moderates the relationship between informational communication and employees' intention to violate ISP. We posit that the effectiveness of anti-neutralization communication can be enhanced by increasing the persuasiveness of anti-neutralization statements. Investigating the potential differences in these communication strategies in both traditional work-from-office setups and remote working will help organizations adapt and customize their communication content and strategies to achieve optimal effectiveness in diverse work environments.
When commenting on articles, please be friendly, welcoming, respectful and abide by the AIS eLibrary Discussion Thread Code of Conduct posted here.
Comments
SIGSEC