Who Sometimes Violates the Rule of the Organizations? An Empirical Study on Information Security Behaviors and Awareness.
Toshihiko Takemura, Ayako Komatsu · 2012
In this article, we investigate to determine some key factors which have effects on employees ’ behaviors of violating the rule which is re-lated to the information leak given a condition that the behaviors are prohibited totally by the organizational measures. By using the col-lected data from a survey that we conducted in March 2011 and em-ploying a stepwise logit model as a statistical tool, we analyze the relationships above. As a result, we found out the some features on the respondent’s behavior of violating the organizational rule. The pri-mary results are followings. First of all, myopic cognition and hyper-metro cognition measured by CFC scale have effects on the behaviors of violating the organizational rules in almost cases. Next, in many cases individual whose information security awareness is higher tends not to violate the rule. Third, the behavior of violating the rule is in-dependent of the degree of the measure satisfaction and the scale of the organization, but is not related to the degree of the workplace satisfac-tion and the evaluation toward the managers in some cases. Fourth, in the organization which the permanent employment is introduced, the individual tends to violate the rule. It is not easy to control psycholog-ical factors such as the individual’s attitude toward risk. Conversely, the factors regard to the organizational attributes such as the degree of 1 workplace satisfaction or the employment system may be controlled by designing the appropriate organizational environment. Consequently, we consider that it may be effective to improve the information security awareness by information security education and training.