Information Security Culture Concept towards Information Security Compliance: A Comparison between IT and Non-IT Professionals

This paper examines the factors determining a positive Information Security Culture (ISC) concept and the influence of ISC towards ISP compliance intention (INT) between IT and non-IT professionals in Malaysian public universities. Partial least square structural equation modelling, using PLS MGA,...

Full description

Saved in:
Bibliographic Details
Main Authors: Akhyari, Nasir, Ruzaini, Abdullah Arshah, Mohd Rashid, Ab Hamid, Syahrul, Fahmy
Format: Article
Language:English
Published: Penerbit UTHM 2022
Subjects:
Online Access:http://umpir.ump.edu.my/id/eprint/34752/7/Information%20Security%20Culture%20Concept%20towards%20Information.pdf
http://umpir.ump.edu.my/id/eprint/34752/
https://publisher.uthm.edu.my/ojs/index.php/ijie/article/view/10747
https://doi.org/10.30880/ijie.2022.14.03.017
Tags: Add Tag
No Tags, Be the first to tag this record!
id my.ump.umpir.34752
record_format eprints
spelling my.ump.umpir.347522022-07-29T01:47:48Z http://umpir.ump.edu.my/id/eprint/34752/ Information Security Culture Concept towards Information Security Compliance: A Comparison between IT and Non-IT Professionals Akhyari, Nasir Ruzaini, Abdullah Arshah Mohd Rashid, Ab Hamid Syahrul, Fahmy L Education (General) T Technology (General) This paper examines the factors determining a positive Information Security Culture (ISC) concept and the influence of ISC towards ISP compliance intention (INT) between IT and non-IT professionals in Malaysian public universities. Partial least square structural equation modelling, using PLS MGA, is used to assess the measurement and structural models, and to compare the results between the two groups. Results indicate all factors have significant contribution towards ISC in both groups, with two out of seven ISC factors have significant differences. This study has revealed that although both groups have the same ISC factors, IT and non-IT professionals have significant difference in terms of believe that Top Management Commitment and Information Security Knowledge are required for implementing a positive ISC. In addition, there is a significant difference between these two groups in terms of the influence of ISC towards ISP compliance intention. ISC has less influence towards INT for Non-IT professionals compared to IT professionals within the same ISC. These empirical findings would benefit in formulating better security strategies by providing appropriate efforts for different groups of employees in the organizations. This study also provides a total cyber security solution for improving information security culture and employees’ compliance towards Information Security Policy. Penerbit UTHM 2022 Article PeerReviewed pdf en cc_by_nc_sa_4 http://umpir.ump.edu.my/id/eprint/34752/7/Information%20Security%20Culture%20Concept%20towards%20Information.pdf Akhyari, Nasir and Ruzaini, Abdullah Arshah and Mohd Rashid, Ab Hamid and Syahrul, Fahmy (2022) Information Security Culture Concept towards Information Security Compliance: A Comparison between IT and Non-IT Professionals. International Journal of Integrated Engineering, 14 (3). pp. 157-165. ISSN 2229-838X (Print); 2600-7916 (Online) https://publisher.uthm.edu.my/ojs/index.php/ijie/article/view/10747 https://doi.org/10.30880/ijie.2022.14.03.017
institution Universiti Malaysia Pahang
building UMP Library
collection Institutional Repository
continent Asia
country Malaysia
content_provider Universiti Malaysia Pahang
content_source UMP Institutional Repository
url_provider http://umpir.ump.edu.my/
language English
topic L Education (General)
T Technology (General)
spellingShingle L Education (General)
T Technology (General)
Akhyari, Nasir
Ruzaini, Abdullah Arshah
Mohd Rashid, Ab Hamid
Syahrul, Fahmy
Information Security Culture Concept towards Information Security Compliance: A Comparison between IT and Non-IT Professionals
description This paper examines the factors determining a positive Information Security Culture (ISC) concept and the influence of ISC towards ISP compliance intention (INT) between IT and non-IT professionals in Malaysian public universities. Partial least square structural equation modelling, using PLS MGA, is used to assess the measurement and structural models, and to compare the results between the two groups. Results indicate all factors have significant contribution towards ISC in both groups, with two out of seven ISC factors have significant differences. This study has revealed that although both groups have the same ISC factors, IT and non-IT professionals have significant difference in terms of believe that Top Management Commitment and Information Security Knowledge are required for implementing a positive ISC. In addition, there is a significant difference between these two groups in terms of the influence of ISC towards ISP compliance intention. ISC has less influence towards INT for Non-IT professionals compared to IT professionals within the same ISC. These empirical findings would benefit in formulating better security strategies by providing appropriate efforts for different groups of employees in the organizations. This study also provides a total cyber security solution for improving information security culture and employees’ compliance towards Information Security Policy.
format Article
author Akhyari, Nasir
Ruzaini, Abdullah Arshah
Mohd Rashid, Ab Hamid
Syahrul, Fahmy
author_facet Akhyari, Nasir
Ruzaini, Abdullah Arshah
Mohd Rashid, Ab Hamid
Syahrul, Fahmy
author_sort Akhyari, Nasir
title Information Security Culture Concept towards Information Security Compliance: A Comparison between IT and Non-IT Professionals
title_short Information Security Culture Concept towards Information Security Compliance: A Comparison between IT and Non-IT Professionals
title_full Information Security Culture Concept towards Information Security Compliance: A Comparison between IT and Non-IT Professionals
title_fullStr Information Security Culture Concept towards Information Security Compliance: A Comparison between IT and Non-IT Professionals
title_full_unstemmed Information Security Culture Concept towards Information Security Compliance: A Comparison between IT and Non-IT Professionals
title_sort information security culture concept towards information security compliance: a comparison between it and non-it professionals
publisher Penerbit UTHM
publishDate 2022
url http://umpir.ump.edu.my/id/eprint/34752/7/Information%20Security%20Culture%20Concept%20towards%20Information.pdf
http://umpir.ump.edu.my/id/eprint/34752/
https://publisher.uthm.edu.my/ojs/index.php/ijie/article/view/10747
https://doi.org/10.30880/ijie.2022.14.03.017
_version_ 1739828266390257664
score 13.211869