Start Date
12-13-2015
Description
Employees’ compliance behavior with information security policies has been extensively researched yet. In particular, many studies identified and explained measures that increase employees’ security compliance such as trainings and controls. Although the identification and explanation of these measures is valuable for managers, these findings are insufficient. Since managers need to balance limited resources, they need to be able to prioritize and invest in the most effective measures for improving employees’ security compliance. Therefore, to complement extant research, we survey 332 employees in an organization that has established 15 security measures. Our results provide managers with a quantitative assessment of these 15 security measures. Furthermore, we discuss its implications and provide five specific recommendations for managers. Besides, results may also be valuable for theorists because they show which types of security trainings are perceived by employees to be more effective than others.
Recommended Citation
Kretzer, Martin and Mädche, Alex, "Which are the Most Effective Measures for Improving Employees’ Security Compliance?" (2015). ICIS 2015 Proceedings. 2.
https://aisel.aisnet.org/icis2015/proceedings/PracticeResearch/2
Which are the Most Effective Measures for Improving Employees’ Security Compliance?
Employees’ compliance behavior with information security policies has been extensively researched yet. In particular, many studies identified and explained measures that increase employees’ security compliance such as trainings and controls. Although the identification and explanation of these measures is valuable for managers, these findings are insufficient. Since managers need to balance limited resources, they need to be able to prioritize and invest in the most effective measures for improving employees’ security compliance. Therefore, to complement extant research, we survey 332 employees in an organization that has established 15 security measures. Our results provide managers with a quantitative assessment of these 15 security measures. Furthermore, we discuss its implications and provide five specific recommendations for managers. Besides, results may also be valuable for theorists because they show which types of security trainings are perceived by employees to be more effective than others.