Start Date
12-13-2015
Description
Incidents of computer abuse, proprietary information leaks and other security lapses have been on an increase. Most often, such security lapses are attributed to internal employees in organizations subverting established organizational information security policy (ISP). As employee compliance with ISP is the key to escalating information security breaches, understanding employee motivation for following ISP is critical. Using the Thomas and Velthouse’s (1990) intrinsic motivation model, we investigate the role of intrinsic motivation for ISP compliance. Through survey data collected from 289 participants, the study demonstrates that the psychological empowerment has a positive impact on participants’ ISP compliance intention. Furthermore, the psychological empowerment can be predicted by structural empowerment practices. In addition, the psychological empowerment may act as a mediator for the relations between structural empowerment practices and participants’ ISP compliance. Theoretical contributions, managerial implications, and directions for future research of this study are discussed.
Recommended Citation
Abdul Talib, Yurita and Dhillon, Gurpreet, "Employee ISP Compliance Intentions: An Empirical Test of Empowerment" (2015). ICIS 2015 Proceedings. 13.
https://aisel.aisnet.org/icis2015/proceedings/SecurityIS/13
Employee ISP Compliance Intentions: An Empirical Test of Empowerment
Incidents of computer abuse, proprietary information leaks and other security lapses have been on an increase. Most often, such security lapses are attributed to internal employees in organizations subverting established organizational information security policy (ISP). As employee compliance with ISP is the key to escalating information security breaches, understanding employee motivation for following ISP is critical. Using the Thomas and Velthouse’s (1990) intrinsic motivation model, we investigate the role of intrinsic motivation for ISP compliance. Through survey data collected from 289 participants, the study demonstrates that the psychological empowerment has a positive impact on participants’ ISP compliance intention. Furthermore, the psychological empowerment can be predicted by structural empowerment practices. In addition, the psychological empowerment may act as a mediator for the relations between structural empowerment practices and participants’ ISP compliance. Theoretical contributions, managerial implications, and directions for future research of this study are discussed.