Journal Article

What levels of moral reasoning and values explain adherence to information security rules? An empirical study

Myyry, Liisa, Pahnila, Seppo, Vartiainen, Tero, Vance, Anthony, Siponen, Mikko

2009

Overview

It is widely agreed that employee non-adherence to information security policies poses a major problem for organizations. Previous research has pointed to the potential of theories of moral reasoning to better understand this problem. However, we find no empirical studies that examine the influence of moral reasoning on compliance with information security policies. We address this research gap by proposing a theoretical model that explains non-compliance in terms of moral reasoning and values. The model integrates two well-known psychological theories: the Theory of Cognitive Moral Development by Kohlberg and the Theory of Motivational Types of Values by Schwartz. Our empirical findings largely support the proposed model and suggest implications for practice and research on how to improve information security policy compliance.

• Publisher: Taylor & Francis,Palgrave Macmillan UK,Taylor & Francis Ltd
• Subject: Access control / Business and Management / Business Information Systems / Cognition & reasoning / Cognitive development / Compliance / Cybersecurity / Data security / Decision making / Employee theft / Employees / Information / information security / information security policy compliance / Information systems / Information Systems and Communication Service / Innovation/Technology Management / Methodological problems / Moral development / Moral judgment / moral reasoning / Noncompliance / Operations Research/Decision Theory / Organizational behavior / Original Article / Psychological aspects / Psychological theories / Reasoning / Research methodology / Rules / Security / Security management / Self interest / Studies / Theories / theory of cognitive moral development / theory of motivational types of values / Values