Understanding employees’ information security–related stress and policy compliance intention: the roles of information security fatigue and psychological capital
Information and Computer Security
ISSN: 2056-4961
Article publication date: 31 May 2022
Issue publication date: 7 November 2022
Abstract
Purpose
This study aims to explore the emotion-based mediator of information security fatigue in the relationship between employees’ information security–related stress (SRS) and information security policy (ISP) compliance intention and the effects of psychological capital (PsyCap) on relieving SRS and promoting compliance.
Design/methodology/approach
The authors tested a series of hypotheses by applying partial least squares–based structural equation modeling to survey data from 488 employees in Chinese enterprises.
Findings
The results suggest that the relationship between SRS and ISP compliance intention is fully mediated by information security fatigue. Employees’ SRS promotes their information security fatigue, which reduces their intention to follow ISPs. In addition, employees with high PsyCap may experience low levels of SRS and information security fatigue, which promotes their willingness to comply with ISPs.
Originality/value
This study extends knowledge by introducing information security fatigue and PsyCap to the field of information security management, and it calls attention to the effects on information security behaviors of employee emotions and positive psychological resources in an organization. The authors reveal the emotion-based mediating effect of information security fatigue and the positive influence of PsyCap in information security management.
Keywords
Acknowledgements
Funding: This study is funded by Humanities and Social Science Fund of Ministry of Education of China (No.20YJC630003), China Postdoctoral Science Foundation (No. 2021T140353), and Postdoctoral Applied Research Project of Qingdao City in China.
Citation
Chen, H., Liu, M. and Lyu, T. (2022), "Understanding employees’ information security–related stress and policy compliance intention: the roles of information security fatigue and psychological capital", Information and Computer Security, Vol. 30 No. 5, pp. 751-770. https://doi.org/10.1108/ICS-03-2022-0047
Publisher
:Emerald Publishing Limited
Copyright © 2022, Emerald Publishing Limited