Promoting Security Behaviors in Remote Work Environments: Personal Values Shaping Information Security Policy Compliance

Carlos I. Torres () and Robert E. Crossler ()
Additional contact information
Carlos I. Torres: ISBA Department, Hankamer School of Business, Baylor University, Waco, Texas 76798
Robert E. Crossler: MISE Department, Carson College of Business, Washington State University, Pullman, Washington 99164

Information Systems Research, 2025, vol. 36, issue 2, 1183-1195

Abstract: Cybersecurity threats and information security policy (ISP) compliance are critical concerns for organizations. The recent trend of working from home has made individual characteristics more relevant in fostering ISP compliance. Whereas extant research has theorized and offered alternatives to induce ISP compliance, most studies have failed to consider the differences between onsite and remote workers to motivate compliance with ISPs and have instead focused on standard interventions without considering personal characteristics. One of the few models including factors related to individuals’ characteristics is the unified model of information security policy compliance (UMISPC). This paper extends the UMISPC by drawing on Schwartz’s universal theory of personal values. We propose the values construct as a robust representation of an individual’s motivations to comply with an ISP. We confirm that personal values are significant predictors of compliance with ISPs. Furthermore, a comparison between onsite and remote workers suggests that personal values are more relevant in remote work settings. Our findings shed light on the values and individual characteristics that are important motivators for ISP compliance and how they differ for onsite and remote workers. Our results suggest that people’s personal motivations should be considered in promoting organizations’ ISPs and that organizations’ interventions should be tailored by understanding what values motivate or hinder ISP compliance.

Keywords: UMISPC; personal values; ISP compliance; values; remote work; hybrid work (search for similar items in EconPapers)
Date: 2025
References: Add references at CitEc
Citations:

Downloads: (external link)
http://dx.doi.org/10.1287/isre.2021.0563 (application/pdf)

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:inm:orisre:v:36:y:2025:i:2:p:1183-1195

Access Statistics for this article

More articles in Information Systems Research from INFORMS Contact information at EDIRC.
Bibliographic data for series maintained by Chris Asher ().