To read this content please select one of the options below:

The effect of compliance knowledge and compliance support systems on information security compliance behavior

Sang Soo Kim (Sogang University, Seoul, South Korea)
Yong Jin Kim (Sogang University, Seoul, South Korea)

Journal of Knowledge Management

ISSN: 1367-3270

Article publication date: 10 July 2017




The purpose of this paper is to understand from the knowledge management perspective how the mechanism of different voluntary compliance behaviors works and how information technology is used for compliance management in corporate settings where privacy and security issues are getting critical due to the advancement of big data and artificial intelligence.


In this study, the authors propose a structural model based on the theory of planned behavior and the IT relatedness theory that behavioral belief about compliance and social pressure affect compliance knowledge and compliance intention, and compliance knowledge partially mediates the impact of both independent variables on compliance intention. The authors surveyed with a structured questionnaire 975 employees of a major Korean energy company, S-OIL, which deploys a compliance support system. The respondents are classified into two groups: an Active IT Utilization Group and a Passive IT Utilization Group.


The results of our empirical examination show that compliance intention belief and social pressure influence compliance intention, and further, that compliance behavior is mediated by compliance knowledge – in both the active IT utilization group and the passive IT utilization group. However, the significance of each path coefficient, R square and the mediation effect in Model 1 (passive IT utilization group) are obviously a poor contrast to Model 2 (active IT utilization group). Also, the path from behavioral belief to compliance knowledge and social pressure to compliance knowledge show a significant moderating effect of IT utilization level.


This paper aims to promote more effective voluntary compliance behavior by increasing the understanding of the impact differences of the preceding factors, and the ways in which those are related to the knowledge management practice in terms of both knowledge itself and its support systems, i.e. compliance support system.



This research was supported by the MSIP (Ministry of Science, ICT and Future Planning), Korea, under the ITRC (Information Technology Research Center) support program (IITP-2017-2015-0-00369) supervised by the IITP (Institute for Information & Communications Technology Promotion).


Kim, S.S. and Kim, Y.J. (2017), "The effect of compliance knowledge and compliance support systems on information security compliance behavior", Journal of Knowledge Management, Vol. 21 No. 4, pp. 986-1010.



Emerald Publishing Limited

Copyright © 2017, Emerald Publishing Limited

Related articles