IDEAS home Printed from https://ideas.repec.org/a/gam/jijerp/v19y2022i23p16038-d989608.html
   My bibliography  Save this article

An Investigation of Employees’ Intention to Comply with Information Security System—A Mixed Approach Based on Regression Analysis and fsQCA

Author

Listed:
  • Wenqin Li

    (School of Management, Xi’an University of Science and Technology, Xi’an 710054, China
    These authors contributed equally to this work.)

  • Rongmin Liu

    (School of Management, Xi’an University of Science and Technology, Xi’an 710054, China
    Research Center for Human Factors and Management Ergonomics, Xi’an University of Science and Technology, Xi’an 710054, China)

  • Linhui Sun

    (School of Management, Xi’an University of Science and Technology, Xi’an 710054, China
    Research Center for Human Factors and Management Ergonomics, Xi’an University of Science and Technology, Xi’an 710054, China
    These authors contributed equally to this work.)

  • Zigu Guo

    (School of Management, Xi’an University of Science and Technology, Xi’an 710054, China
    Research Center for Human Factors and Management Ergonomics, Xi’an University of Science and Technology, Xi’an 710054, China)

  • Jie Gao

    (School of Management, Xi’an Jiaotong University, Xi’an 710049, China)

Abstract

Employee security compliance behavior has become an important safeguard to protect the security of corporate information assets. Focusing on human factors, this paper discusses how to regulate and guide employees’ compliance with information security systems through effective methods. Based on protection motivation theory (PMT), a model of employees’ intention to comply with the information security system was constructed. A questionnaire survey was adopted to obtain 224 valid data points, and SPSS 26.0 was applied to verify the hypotheses underlying the research model. Then, based on the results of a regression analysis, fuzzy set qualitative comparative analysis (fsQCA) was used to explore the conditional configurations that affect employees’ intention to comply with the information security system from a holistic perspective. The empirical results demonstrated that perceived severity, perceived vulnerability, response efficacy, and self-efficacy all positively influenced the employees’ intention to comply with the information security system; while rewards and response costs had a negative effect. Threat appraisal had a greater effect on employees’ intention to comply with the information security system compared to response appraisal. The fsQCA results showed that individual antecedent conditions are not necessary to influence employees’ intention to comply with an information security system. Seven pathways exist that influence an employees’ intention to comply with an information security system, with reward, self-efficacy, and response cost being the core conditions having the highest probability of occurring in each configuration of pathways, and with perceived severity and self-efficacy appearing in the core conditions of configurations with an original coverage greater than 40%. Theoretically, this study discusses the influence of the elements of PMT on employees’ intention to comply with an information security system, reveals the mechanism of influence of the combination of the influencing factors on the outcome variables, and identifies the core factors and auxiliary factors in the condition configurations, providing a new broader perspective for the study of information security compliance behavior and providing some theoretical support for strengthening enterprise security management. Practically, targeted suggestions are proposed based on the research results, to increase the intention of enterprise employees to comply with information security systems, thereby improving the effectiveness of enterprise information security management and the degree of information security in enterprises.

Suggested Citation

  • Wenqin Li & Rongmin Liu & Linhui Sun & Zigu Guo & Jie Gao, 2022. "An Investigation of Employees’ Intention to Comply with Information Security System—A Mixed Approach Based on Regression Analysis and fsQCA," IJERPH, MDPI, vol. 19(23), pages 1-19, November.
    • Handle: RePEc:gam:jijerp:v:19:y:2022:i:23:p:16038-:d:989608
    as

    Download full text from publisher

    File URL: https://www.mdpi.com/1660-4601/19/23/16038/pdf
    Download Restriction: no
    File URL: https://www.mdpi.com/1660-4601/19/23/16038/
    Download Restriction: no
    ---><---

    References listed on IDEAS

    as
    1. Kamini Gupta & Donal Crilly & Thomas Greckhamer, 2020. "Stakeholder engagement strategies, national institutions, and firm performance: A configurational perspective," Strategic Management Journal, Wiley Blackwell, vol. 41(10), pages 1869-1900, October.
    2. Beynon, Malcolm J. & Jones, Paul & Pickernell, David, 2019. "The role of entrepreneurship, innovation, and urbanity-diversity on growth, unemployment, and income: US state-level evidence and an fsQCA elucidation," Journal of Business Research, Elsevier, vol. 101(C), pages 675-687.
    3. Estevão, João & Raposo, Clara, 2018. "The impact of the 2030 Climate and Energy Framework Agreement on electricity prices in MIBEL: A mixed-methods approach," Journal of Business Research, Elsevier, vol. 89(C), pages 411-417.
    4. Douglas, Evan J. & Shepherd, Dean A. & Prentice, Catherine, 2020. "Using fuzzy-set qualitative comparative analysis for a finer-grained understanding of entrepreneurship," Journal of Business Venturing, Elsevier, vol. 35(1).
    5. Xinping Wang & Cheng Zhang & Jun Deng & Chang Su & Zhenzhe Gao, 2022. "Analysis of Factors Influencing Miners’ Unsafe Behaviors in Intelligent Mines using a Novel Hybrid MCDM Model," IJERPH, MDPI, vol. 19(12), pages 1-30, June.
    6. Duarte, Paulo & Pinho, José Carlos, 2019. "A mixed methods UTAUT2-based approach to assess mobile health adoption," Journal of Business Research, Elsevier, vol. 102(C), pages 140-150.
    Full references (including those not matched with items on IDEAS)

    Citations

    Citations are extracted by the CitEc Project, subscribe to its RSS feed for this item.
    as


    Cited by:

    1. Maurizio Cavallari, 2023. "Organizational Determinants and Compliance Behavior to Shape Information Security Plan," Academic Journal of Interdisciplinary Studies, Richtmann Publishing Ltd, vol. 12, November.

    Most related items

    These are the items that most often cite the same works as this one and are cited by the same works as this one.
    1. Jin, Zhizhou & Zeng, Saixing & Chen, Hongquan & Shi, Jonathan Jingsheng, 2022. "Explaining the expansion performance in technological capability of participants in megaprojects: A configurational approach," Technological Forecasting and Social Change, Elsevier, vol. 181(C).
    2. Huang, Shuangfa & Battisti, Martina & Pickernell, David, 2023. "The roles of innovation strategy and founding team diversity in new venture growth," Journal of Business Research, Elsevier, vol. 158(C).
    3. Songsong Cheng & Qunpeng Fan & Minghao Huang, 2023. "Strategic Orientation, Dynamic Capabilities, and Digital Transformation of Commercial Banks: A Fuzzy-Set QCA Approach," Sustainability, MDPI, vol. 15(3), pages 1-19, January.
    4. Baier-Fuentes, Hugo & Andrade-Valbuena, Nelson A. & Huertas Gonzalez-Serrano, Maria & Gaviria-Marin, Magaly, 2023. "Bricolage as an effective tool for the survival of owner-managed SMEs during crises," Journal of Business Research, Elsevier, vol. 157(C).
    5. Jin, Ting & Prentice, Catherine & Shao, Wei, 2021. "Identifying antecedent conditions for luxury brand purchase," Journal of Retailing and Consumer Services, Elsevier, vol. 60(C).
    6. Arfi, Wissal Ben & Nasr, Imed Ben & Kondrateva, Galina & Hikkerova, Lubica, 2021. "The role of trust in intention to use the IoT in eHealth: Application of the modified UTAUT in a consumer context," Technological Forecasting and Social Change, Elsevier, vol. 167(C).
    7. Rubio-Andrés, Mercedes & Ramos-González, Mª del Mar & Sastre-Castillo, Miguel Ángel & Gutiérrez-Broncano, Santiago, 2023. "Stakeholder pressure and innovation capacity of SMEs in the COVID-19 pandemic: Mediating and multigroup analysis," Technological Forecasting and Social Change, Elsevier, vol. 190(C).
    8. Ran Liu & Tianan Yang & Wenhao Deng & Xiaoyan Liu & Jianwei Deng, 2022. "What Drives the Influence of Health Science Communication Accounts on TikTok? A Fuzzy-Set Qualitative Comparative Analysis," IJERPH, MDPI, vol. 19(21), pages 1-11, October.
    9. Su-Chen(Cecilia) Lin & Mei-Chen Chuang & Chen-Yuan Huang & Chia-En Liu, 2023. "Nursing Staff’s Behavior Intention to Use Mobile Technology: An Exploratory Study Employing the UTAUT 2 Model," SAGE Open, , vol. 13(4), pages 21582440231, November.
    10. Colin Donaldson & Francisco Liñán & Joaquin Alegre, 2021. "Entrepreneurial Intentions: Moving the Field Forwards," Journal of Entrepreneurship and Innovation in Emerging Economies, Entrepreneurship Development Institute of India, vol. 30(1), pages 30-55, March.
    11. Yan Zhang & Jiekuan Zhang, 2023. "Revisiting Tourism Development and Economic Growth: A Framework for Configurational Analysis in Chinese Cities," Sustainability, MDPI, vol. 15(13), pages 1-20, June.
    12. Alam, Mohammad Zahedul & Hu, Wang & Kaium, Md Abdul & Hoque, Md Rakibul & Alam, Mirza Mohammad Didarul, 2020. "Understanding the determinants of mHealth apps adoption in Bangladesh: A SEM-Neural network approach," Technology in Society, Elsevier, vol. 61(C).
    13. ben Jabeur, Sami & Mefteh-Wali, Salma & Carmona, Pedro, 2021. "The impact of institutional and macroeconomic conditions on aggregate business bankruptcy," Structural Change and Economic Dynamics, Elsevier, vol. 59(C), pages 108-119.
    14. João Estevão & Clara Raposo & José Dias Lopes, 2018. "The Paris Agreement and electricity markets outside the EU," Contemporary Economics, University of Economics and Human Sciences in Warsaw., vol. 12(4), December.
    15. Cobelli, Nicola & Cassia, Fabio & Donvito, Raffaele, 2023. "Pharmacists' attitudes and intention to adopt telemedicine: Integrating the market-orientation paradigm and the UTAUT," Technological Forecasting and Social Change, Elsevier, vol. 196(C).
    16. Ardvin Kester S. Ong, 2022. "A Machine Learning Ensemble Approach for Predicting Factors Affecting STEM Students’ Future Intention to Enroll in Chemistry-Related Courses," Sustainability, MDPI, vol. 14(23), pages 1-17, December.
    17. Nattakit Yuduang & Ardvin Kester S. Ong & Yogi Tri Prasetyo & Thanatorn Chuenyindee & Poonyawat Kusonwattana & Waranya Limpasart & Thaninrat Sittiwatethanasiri & Ma. Janice J. Gumasing & Josephine D. , 2022. "Factors Influencing the Perceived Effectiveness of COVID-19 Risk Assessment Mobile Application “MorChana” in Thailand: UTAUT2 Approach," IJERPH, MDPI, vol. 19(9), pages 1-19, May.
    18. Joep Cornelissen & Mariëtte Kaandorp, 2023. "Towards Stronger Causal Claims in Management Research: Causal Triangulation Instead of Causal Identification," Journal of Management Studies, Wiley Blackwell, vol. 60(4), pages 834-860, June.
    19. McSweeney, Jordan J. & McSweeney, Kevin T. & Webb, Justin W. & Devers, Cynthia E., 2022. "The right touch of pitch assertiveness: Examining entrepreneurs' gender and project category fit in crowdfunding," Journal of Business Venturing, Elsevier, vol. 37(4).
    20. Miriam Flickinger & Miriam Zschoche, 2023. "The Interplay of Subsidiary Performance and Cultural Distance in International Downsizing Decisions," Schmalenbach Journal of Business Research, Springer, vol. 75(2), pages 127-147, June.

    Corrections

    All material on this site has been provided by the respective publishers and authors. You can help correct errors and omissions. When requesting a correction, please mention this item's handle: RePEc:gam:jijerp:v:19:y:2022:i:23:p:16038-:d:989608. See general information about how to correct material in RePEc.

    If you have authored this item and are not yet registered with RePEc, we encourage you to do it here. This allows to link your profile to this item. It also allows you to accept potential citations to this item that we are uncertain about.

    If CitEc recognized a bibliographic reference but did not link an item in RePEc to it, you can help with this form .

    If you know of missing items citing this one, you can help us creating those links by adding the relevant references in the same way as above, for each refering item. If you are a registered author of this item, you may also want to check the "citations" tab in your RePEc Author Service profile, as there may be some citations waiting for confirmation.

    For technical questions regarding this item, or to correct its authors, title, abstract, bibliographic or download information, contact: MDPI Indexing Manager (email available below). General contact details of provider: https://www.mdpi.com .

    Please note that corrections may take a couple of weeks to filter through the various RePEc services.

    IDEAS is a RePEc service. RePEc uses bibliographic data supplied by the respective publishers.