Factors Influencing Employees on Compliance with Cybersecurity Policies and Their Implications for Protection of Information and Technology Assets in Saudi Arabia

作     者：Sami Saad Alsemairi Sami Saad Alsemairi

作者机构：Department of Digital Transformation and Information Programs Institute of Public Administration Jeddah Saudi Arabia 

出 版 物：《Intelligent Information Management》 (智能信息管理（英文）)

年 卷 期：2023年第15卷第4期

页      面：259-283页

学科分类：08[工学] 080502[工学-材料学] 0805[工学-材料科学与工程（可授工学、理学学位）] 

主　　题：Cybersecurity Policies Compliance Protection Information and Technology Assets 

摘      要：In the current digital era, it is difficult to preserve the confidentiality, integrity, and availability of an organization’s information and technology assets against cyber attacks. Organizations cannot rely solely on technical solutions for defense, since many cyber attacks attempt to exploit non-technical vulnerabilities such as how well employees comply with the organization’s cybersecurity policies. This study surveyed 245 randomly selected employees of government organizations in the Kingdom of Saudi Arabia with an electronically distributed questionnaire about factors that influence employees’ compliance with cybersecurity policies. The study found that ethical factors had the most influence on employee compliance with cybersecurity policies, followed in decreasing order of influence by legislative factors, technical factors, and administrative factors.