Digital Workplaces and Information Security Behavior of Business Employees: An Empirical Study of Saudi Arabia
Author:
Open Access
- 30 March 2023
- journal article
- research article
- Published by MDPI AG in Sustainability
- Vol. 15 (7) , 6019
Abstract
In the post pandemic era, the telecommuting of business employees has widely become acceptable in organizations, which demands extensive dependence on digital technologies. In addition, this poses additional security threats for business employees as well as organizations. In order to better respond to security threats, business employees must have a higher level of awareness of the potential threats that are relevant to digital infrastructure used within the workplace. In this paper, we present a quantitative study conducted in line with the theory of planned behavior to gain insight into employee behavior toward information security within different business sectors in Saudi Arabia. The key factors chosen for our model were password management, infrastructure security management, email management, organizational security policy, organizational support and training, and the perception of the level of security. We have applied structured equation modelling to identify most of the relevant factors based on the respondents’ feedback. The results based on the business employee behavior showed that they respondents did not perceive all of the constructs of our model as relevant security factors, which can potentially result in security lapses. This indicates that more security-related measures should be put in place and that business employees should be updated periodically about potential security threats. To this effect, we divided the studied security measures into those which should be implemented at organizational and individual levels. The results will potentially help business managers to design appropriate security trainings, guidelines, and policies for their employees to ensure more information security awareness and protect their technological infrastructure, especially within home office environments.Keywords
Funding Information
- SAUDI ARAMCO Cybersecurity Chair, Imam Abdulrahman Bin Faisal University
This publication has 40 references indexed in Scilit:
- Web 2.0 Technologies and Social Networking Security Fears in EnterprisesInternational Journal of Advanced Computer Science and Applications, 2012
- Effectiveness of information security awareness methods based on psychological theoriesAFRICAN JOURNAL OF BUSINESS MANAGEMENT, 2011
- Improving information security awareness and behaviour through dialogue, participation and collective reflection. An intervention studyComputers & Security, 2010
- The psychology of password management: a tradeoff between security and convenienceBehaviour & Information Technology, 2010
- Information security policy: An organizational-level process modelComputers & Security, 2009
- Encouraging information security behaviors in organizations: Role of penalties, pressures and perceived effectivenessDecision Support Systems, 2009
- Perception of information securityBehaviour & Information Technology, 2008
- Implementation and effectiveness of organizational information security measuresInformation Management & Computer Security, 2008
- An empirical investigation of anti-spyware software adoption: A multitheoretical perspectiveInformation & Management, 2008
- The theory of planned behaviorOrganizational Behavior and Human Decision Processes, 1991