Information security policies' compliance: a perspective for higher education institutions

• Published in: The Journal of computer information systems 2020-05, Vol.60 (3), p.201-211
• Main Authors: Hina, Sadaf, Dominic, P. Dhanapal Durai
• Format: Article
• Language: English
• Subjects: computer and information systems security; End users; Higher education; Higher education institutions; Information management; information security awareness; information security culture; information security management; Information security policies' compliance; Literature reviews; Motivation; Policies; Security management
• ISSN: 0887-4417; 2380-2057
• DOI: 10.1080/08874417.2018.1432996

This paper provides a systematic literature review in the information security policies' compliance (ISPC) field, with respect to information security culture, information security awareness, and information security management exploring in various settings the research designs, methodologies, and frameworks that have evolved over the last decade. Studies conducted from 2006 to 2016 reporting results from data collected through diverse means have been explored; however, only a few studies have focused primarily on a sensitive infrastructure under risk, as is the case with higher education institutions (HEIs). This study reports that ISPC in HEIs remains scarce, as is the realization of security threats and dissemination of information security policies to end users (employees). This research makes a novel contribution to the body of knowledge as a unique study that has reviewed the influence of institutional governance in HEIs on protection motivation leading towards ISPC.