Factors Affecting Employees’ Compliance with Information Security Policies: A Case Study of Islamic Banks in Yemen

Abstract

Information and security are an integral part of the structure of any contemporary organization around the world. Although the reliance on information has increased significantly in recent time, but the sources of this information are vulnerable to the internal and external threats. To address potential threats and challenges related to information security; organizations apply an Information Security Policies (ISP) to guide staff to the right actions towards an organization's resources. However, the violation of these policies is common, and organizations pay heavy costs for these violations. Users are the weakest link in the information security framework. So, the challenges facing organizations and researchers are how to transform the employees from being the weakest link to the first line of defense of information security in an organization. This study aims to investigate the most important factors that motivate employees to comply with ISP in Yemeni Islamic banks. Descriptive research design with simple random sampling was used in this study. The study utilized elements introduced by Technology Acceptance Model (TAM) namely, perceived usefulness and perceived ease of use, in addition to two new factors which are subjective norms and job satisfaction. The primary data was collected by structured questionnaire from 300 employees from different departments at Yemeni Islamic banks in Sana'a. The findings show that variables: Ease of Use, Subjective Norms, and Job Satisfaction, have a significant positive influence on compliance with ISP, However, usefulness shown to has no significant on compliance with ISP. The study concluded with recommendations emphasizing the importance of these factors and the need to exploit them to enhance compliance with ISP.