Paper Type

Complete

Abstract

As the reliance on Information Systems (IS) by organisaitons for process improvement, operational excellence and competitive advantage continue to intensify, various information security risk prevention technologies have become available. It is apparent that exclusive reliance on technologies like firewalls, intrusion detection systems, and anti-virus software are not enough and should be complemented with employees’ compliance with IS security policies. However, research on the compliance intentions among contingent employees is limited. This paper synthesizes existing literature on factors that determine information system security policy (ISSP) compliance while prioritizing contingent employees given the differences in their contractual arrangements. The paper proposes a conceptual framework that explains the intentions of contingent employees to comply with ISSPs. We propose that Subjective Norm, Deterrence, and Involvement mechanisms are effective in promoting contingent employees’ ISSP compliance intentions. The study highlights the need for organisations to review their ISSPs to address the issue of contingent employees.

Paper Number

2235

Author Connect URL

https://authorconnect.aisnet.org/conferences/AMCIS2025/papers/2235

Comments

SIGSEC

Author Connect Link

Share

COinS
 
Aug 15th, 12:00 AM

Information Security Compliance Intentions: Role of Contingent Employees

As the reliance on Information Systems (IS) by organisaitons for process improvement, operational excellence and competitive advantage continue to intensify, various information security risk prevention technologies have become available. It is apparent that exclusive reliance on technologies like firewalls, intrusion detection systems, and anti-virus software are not enough and should be complemented with employees’ compliance with IS security policies. However, research on the compliance intentions among contingent employees is limited. This paper synthesizes existing literature on factors that determine information system security policy (ISSP) compliance while prioritizing contingent employees given the differences in their contractual arrangements. The paper proposes a conceptual framework that explains the intentions of contingent employees to comply with ISSPs. We propose that Subjective Norm, Deterrence, and Involvement mechanisms are effective in promoting contingent employees’ ISSP compliance intentions. The study highlights the need for organisations to review their ISSPs to address the issue of contingent employees.

When commenting on articles, please be friendly, welcoming, respectful and abide by the AIS eLibrary Discussion Thread Code of Conduct posted here.