Dual Routes of Training on Information Security Policy Compliance

Abstract

ABSTRACT This study aims to explore the mechanisms by which training influences employees’ information security policy compliance (ISPC) through the mediating roles of compliance knowledge and social pressure. An empirical model is conceptualized on the theoretical basis of the Elaboration Likelihood Model (ELM). Based on a survey conducted in China, a sample of 304 participants was used to test the impact of training on ISPC as well as the mediating effects of compliance knowlgedge (as a central route) and social pressure (as a peripheral route). The results revealed that training had a positive effect on ISPC, and the mediating effects of compliance knowledge and social pressure were both positive and complementary. The results also indicated that the mediating effect of compliance knowledge was stronger than that of social pressure, which was consistent with the judgment of ELM.