RÉPLICA DE UN MODELO DE CUMPLIMIENTO DE LA POLÍTICA DE SEGURIDAD DE LA INFORMACIÓN EN LAS ORGANIZACIONES

Abstract

This study is an adaptation of the model proposed by Herath & Rao (2009b), to identify the determinants that influence in the Information Security Policies (PSI)compliance intention in the Ecuadorean context. The proposed model includes 14 determinants suggested in: General Deterrence Theory (GDT), Protection Motivation Theory (PMT), Theory of Planned Behavior (TPB), Decomposed Theory of Planned Behavior (DTPB) and Organisational Commitment (OC). The sample was selected from a Public Company of Ecuador, based on 592 reliable responses. The relationship between the determinants was methodologically verified through the path analysis. As a result, the findings of the present investigation contradict the findings of the original study, in the following determinants: (a) perceived probability of security breach, (b) security policy attitude, (c) punishment severity and (d) response cost. In our study, the first three ones were significant and the only no significant path was response cost. This last finding is contrary to that expected, based on the PMT (Rogers, 1975). The contributions suggest important practical implications on employee awareness due to the fact that this type of studies has not been evidenced in the Ecuadorean context. In addition, the adaptation of this model contributes significantly due to the fact that few studies have been evidenced in the literature on organizational behavior and its relationship with PSI compliance.