Top Management Championship and Individual Behaviour Towards Information Security: An Integrative Model

We develop an individual behavioural model in the context of information security in organizational settings. This model integrates the top management championship theory and the theory of planned behaviour in conjunction with organizational culture and personality traits. Using structural equation modelling techniques and survey data, we test hypotheses on how top management beliefs and participation influence key individual behavioural determinants as well as the role of organizational culture and personality traits in moderating the relationships among key constructs. We find that the influence of top management on employee behaviour is mostly through the top management participation in information security-related initiatives and activities. More importantly, we find that a rules-oriented organizational culture enhances the effect of top management participation on employee behaviour. However, the hypothesized moderating effect of personality trait (dutifulness) on the relationships between attitudes, subjective norm, perceived behavioural control and behavioural intention are not supported.