The security environment in Indian commercial banks: an employee's information security behaviour perspective

The drastic changes in technology profoundly influence organisational performance in the ICT-dominated business environment; hence, no organisation can afford to undermine technology adoption in their operations and management. However, while such technologies have benefited organisations immensely, they are not free from concerns, especially related to information security threats from outside and within the organisation, including the employees. The current study explores the information security issues emanating from employees' information security awareness, attitude, policies, and employees' information security behaviour. A structured questionnaire was administered among 420 public and private sector bank employees, and 389 responses were considered for the final analysis. Results from the structured equation modelling analysis indicate that employees' attitudes towards subjective norms and information security profoundly and positively influence their information security behaviour. Information security policy (ISP) characteristics and awareness have played an important role in shaping employees' attitudes towards ISP compliance. The findings also provide insight into factors that do not influence employees' information security behaviours (ISB) that can help the bank management improve in this area with a suitable policy framework in the future.