Changes in Employee Intention to Comply with Organizational Security Policies and Procedures Factoring Risk Perception: a Comparison

Protecting corporate assets, both the physical and the digital is a major concern for managers. Managers seek ways to encourage employees to adhere to and follow organizational security policies to protect not only the organization as a whole but also the employee and the customer as well. Part of the reason existing security measures fail is because employees fail to follow organizational security policies and procedures but this failure is not necessarily due to the organizational controls; it can also be related to the individual’s perception of risk and the person’s general attitude towards security policies and procedures. This study compares the results of a 2006 national study with data collected in 2010 to compare and contrast how employee intentions have changed during the five year period. The study includes perceived personal risk with constructs for attitudes toward security policies and technologies.