Enhancing information security management and performance through social and relational factors: a structural equation modelling approach

Despite the growing significance of information security management, existing research overlooks the influence of relational dynamics on information security performance. By applying social capital theory, this study aims to clarify how relational factors contribute to effective information security management and performance. We administered a structured questionnaire to 214 experts from various industries, selected through purposive sampling based on their knowledge of information security management. We conducted statistical analyses using partial least squares structural equation modelling (PLS-SEM) to assess the robustness of the results. The findings show that relationship management positively impacts both information security management and performance, while stakeholder management plays a crucial role in promoting effective security practices. Additionally, information security management significantly enhances overall organisational performance. This study advances theoretical understanding by highlighting the critical role of social and relational factors in information security. Practically, it suggests that firms should strengthen relationships and engage stakeholders through strategic relational initiatives to improve security outcomes, ensure data protection, and comply with regulatory requirements. By applying social capital theory to information security management, this research emphasises the importance of strong relationships and collaboration with stakeholders in achieving superior information security performance.