Fostering information security compliance as organizational citizenship behavior

Abstract

Information security is heightened when employees develop a strong sense of information stewardship for information assets, a form of organizational citizenship behavior, suggesting that compliance should be perceived as a symbiotic relationship between organizations and employees. We conducted a field study by collecting multi-source, match-paired survey data from 487 employees paired with their supervisor's ratings. Results showed that affective commitment, job satisfaction, perceived organizational support, and social influence were positively related to compliance behavior. This research contributes to the information security literature by showing that employees with strong organizational bond are more likely to exhibit higher levels of security policy compliance.