Dual Routes of Training on Information Security Policy Compliance

ABSTRACT

This study aims to explore the mechanisms by which training influences employees’ information security policy compliance (ISPC) through the mediating roles of compliance knowledge and social pressure. An empirical model is conceptualized on the theoretical basis of the Elaboration Likelihood Model (ELM). Based on a survey conducted in China, a sample of 304 participants was used to test the impact of training on ISPC as well as the mediating effects of compliance knowlgedge (as a central route) and social pressure (as a peripheral route). The results revealed that training had a positive effect on ISPC, and the mediating effects of compliance knowledge and social pressure were both positive and complementary. The results also indicated that the mediating effect of compliance knowledge was stronger than that of social pressure, which was consistent with the judgment of ELM.

KEYWORDS:

• Training
• knowledge
• social pressure
• ELM
• ISPC

Acknowledgments

We would like to thank Dr. Lingyan Hu from Hangzhou Dianzi University for her help in the revision.

Disclosure statement

No potential conflict of interest was reported by the author(s).

Additional information

Funding

The work was supported by the National Social Science Foundation of China (Education Science Youth Project) “Study on the cybersecurity talents demand matching mechanism and cultivation path under the Strategy of Cyber Power” [CIA200273].