Towards a user-centric theory of value-driven information security compliance

摘要

Purpose The purpose of this paper is to fill a gap in the literature, by investigating the relationship between users' perceptions of the value of the information that they are handling, and their resultant level of compliance with their organisation's information security policies. In so doing, the authors seek to develop a theory of value-driven information security compliance.