Exploring the Drivers of Information Security Policy Compliance Among Contingent Employees: A Social, Deterrent, and Involvement-Based Approach
This research addresses the problem of ensuring information security policy compliance among contingent employees, a group with distinct engagement patterns, for institutions increasingly reliant on Information Systems.
This study investigated factors influencing Information Systems Security Policy (ISSP) compliance among contingent employees in Ghanaian universities. It found that Subjective Norm, Deterrence (certainty of detection and severity of punishment), and involvement mechanisms (knowledge sharing and collaboration) significantly shape attitudes toward ISSPs, with knowledge sharing having the strongest effect, and attitudes strongly predict compliance intentions.
As institutions increasingly depend on Information Systems (ISs), ensuring compliance with Information Systems Security Policies (ISSPs) is critical, especially among contingent employees, whose engagement differs from that of permanent staff. This study examines how Subjective Norm, Deterrence (certainty of detection and severity of punishment), and involvement mechanisms (knowledge sharing and collaboration) influence contingent employees Attitudes Toward ISSPs and, ultimately, their Compliance Intentions. Drawing on data from Ghanaian universities and analyzed using PLS-SEM, the findings confirm that all proposed factors significantly shape attitudes, with knowledge sharing having the strongest effect. Attitude toward ISSPs also strongly predicts compliance intentions. The results support integrating social, cognitive, and collaborative factors into existing ISSP compliance models. Practical implications emphasize fostering inclusive and supportive environments alongside enforcement. This study advances theory and provides a foundation for future research into ISSP behavior among temporary academic staff.