Abstract:Employee security compliance behavior has become an important safeguard to protect the security of corporate information assets. Focusing on human factors, this paper discusses how to regulate and guide employees' compliance with information security systems through effective methods. Based on protection motivation theory (PMT), a model of employees' intention to comply with the information security system was constructed. A questionnaire survey was adopted to obtain 224 valid data points, and SPSS 26.0 was applied to verify the hypotheses underlying the research model. Then, based on the results of a regression analysis, fuzzy set qualitative comparative analysis (fsQCA) was used to explore the conditional configurations that affect employees' intention to comply with the information security system from a holistic perspective. The empirical results demonstrated that perceived severity, perceived vulnerability, response efficacy, and self-efficacy all positively influenced the employees' intention to comply with the information security system; while rewards and response costs had a negative effect. Threat appraisal had a greater effect on employees' intention to comply with the information security system compared to response appraisal. The fsQCA results showed that individual antecedent conditions are not necessary to influence employees' intention to comply with an information security system. Seven pathways exist that influence an employees' intention to comply with an information security system, with reward, self-efficacy, and response cost being the core conditions having the highest probability of occurring in each configuration of pathways, and with perceived severity and self-efficacy appearing in the core conditions of configurations with an original coverage greater than 40%. Theoretically, this study discusses the influence of the elements of PMT on employees' intention to comply with an information security system, reveals the mechanism of influence of the combination of the influencing factors on the outcome variables, and identifies the core factors and auxiliary factors in the condition configurations, providing a new broader perspective for the study of information security compliance behavior and providing some theoretical support for strengthening enterprise security management. Practically, targeted suggestions are proposed based on the research results, to increase the intention of enterprise employees to comply with information security systems, thereby improving the effectiveness of enterprise information security management and the degree of information security in enterprises.

Unable to comply with regulations: How deterrent and social learning factors contribute to workplace safety violation

Violation with Concerns of Safety: A Study on Non-Compliant Behavior and the Antecedent and Consequent Effects in Power Grid Construction

Measuring the Effects of External Factor on Leadership Safety Behavior: Case Study of Mine Enterprises in China

Violation Causes from the Perspectives of Managers and Workers in Chinese Railway Systems: an Exploratory Study

Linking Safety-Specific Leader Reward and Punishment Omission to Safety Compliance Behavior: The Role of Distributive Justice and Role Ambiguity

Safety regulation enforcement and production safety: The role of penalties and voluntary safety management systems

Safety Comes First: A Multilevel Examination of Employee Unsafe Behaviors and Safety Outcomes

Better safe than sorry: the role of anticipated regret and organizational ethical climate in predicting workplace safety behavior

How Do Psychological Cognition and Institutional Environment Affect the Unsafe Behavior of Construction Workers?—Research on fsQCA Method

How Vicarious Experiences Influence Non‐compliance with COVID‐19 Prevention Regulations

Multidimensional analysis of supervisors' safety leadership on safety violations of construction workers: An empirical investigation

Modeling antecedents of safety compliance of construction workers in Australia: a perspective of trait activation theory

Abusive Supervision, Thwarted Belongingness, and Workplace Safety: A Group Engagement Perspective.

Safety-Specific Passive-Avoidant Leadership and Safety Compliance among Chinese Steel Workers: The Moderating Role of Safety Moral Belief and Organizational Size

Exploring the Complex Relationships Between Factors That Affect Employee Cyberloafing Using a Novel Approach: Findings from Fuzzy-Set Qualitative Comparative Analysis

Research on the configuration of factors influencing safety citizenship behavior of construction workers based on fsQCA

An Investigation of Employees' Intention to Comply with Information Security System—A Mixed Approach Based on Regression Analysis and fsQCA

Social environment, health cognition, and health behavior: how individuals with non-fixed employment end up with adverse health outcomes in China under the era of VUCA?-findings from PLS-SEM and fsQCA

Impact of negative emotions on violations of information security policy and possible mitigations

Hospital Staff’s Adherence to Information Security Policy: A Quest for the Antecedents of Deterrence Variables

The Mediating Role of Job Competence between Safety Participation and Behavioral Compliance