To read this content please select one of the options below:

The influence of organisational culture and information security culture on employee compliance behaviour

Grant Solomon (Department of Information Systems, University of Cape Town, Cape Town, South Africa)
Irwin Brown (Department of Information Systems, University of Cape Town, Cape Town, South Africa)

Journal of Enterprise Information Management

ISSN: 1741-0398

Article publication date: 7 October 2020

Issue publication date: 15 July 2021

2062

Abstract

Purpose

Organisational culture plays an important role in influencing employee compliance with information security policies. Creating a subculture of information security can assist in facilitating compliance. The purpose of this paper is to explain the nature of the combined influence of organisational culture and information security culture on employee information security compliance. This study also aims to explain the influence of organisational culture on information security culture.

Design/methodology/approach

A theoretical model was developed showing the relationships between organisational culture, information security culture and employee compliance. Using an online survey, data was collected from a sample of individuals who work in organisations having information security policies. The data was analysed with Partial Least Square Structural Equation Modelling (PLS-SEM) to test the model.

Findings

Organisational culture and information security culture have significant, yet similar influences on employee compliance. In addition, organisational culture has a strong causal influence on information security culture.

Practical implications

Control-oriented organisational cultures are conducive to information security compliant behaviour. For an information security subculture to be effectively embedded in an organisation's culture, the dominant organisational culture would have to be considered first.

Originality/value

This research provides empirical evidence that information security subculture is influenced by organisational culture. Compliance is best explained by their joint influence.

Keywords

Citation

Solomon, G. and Brown, I. (2021), "The influence of organisational culture and information security culture on employee compliance behaviour", Journal of Enterprise Information Management, Vol. 34 No. 4, pp. 1203-1228. https://doi.org/10.1108/JEIM-08-2019-0217

Publisher

:

Emerald Publishing Limited

Copyright © 2020, Emerald Publishing Limited

Related articles