Abstract

Now a day information security (InfoSec) is a prime focus and critical aspect of all organizations as well as individual users. The major purpose of this study was to assess the association between employees’ personality difference and InfoSec performance in the Ethiopian, INSA context. Accordingly, the five-factor personality difference (OCEAN) was treated as the independent variable, while the InfoSec performance was treated as a dependent variable. Based on the quantitative approach, a correlational research design was employed. A total of 320 participants were selected using a stratified random sampling technique. The BFFI and ISP scales were administered to collect the quantitative data. The Independent t-test, one-way ANOVA, Pearson Correlation, and hierarchical multiple regression data analysis methods were performed to address the research questions. Accordingly, the present study revealed the following findings. Firstly, employees InfoSec performance significantly differed by their sex, level of education, job positions, and length of InfoSec training taken. Secondly, age, work experience, and personality difference were significantly related to the employees InfoSec performance. Thirdly, employees' personality difference significantly predicted their InfoSec performance both independently and jointly. Generally, personnel recruiters, employers, trainers, and interventionists were recommended to consider their candidates' background characteristics and personality difference when they deliver their services. Keywords: Personality Difference; Information Security (InfoSec) Performance DOI: 10.7176/RHSS/12-1-01 Publication date: January 31 st 2022

Highlights

  • As we live in the era of information and continuous advancements of technology, we send, receive, or store bulky amount of critical organizational information such as files, documents, etc. in each day (Salgovicova and Prajova, 2012)

  • This study provided a self-report and evidencebased understanding of the employees' information security (InfoSec) performance difference as a function of their level of education, job position, and InfoSec training taken in the Ethiopian, Information Network Security Agency (INSA) context

  • The employees InfoSec performance significantly differed by their demographic characteristics such as sex, level of education, job position, and length of InfoSec training taken

Read more

Summary

Introduction

As we live in the era of information and continuous advancements of technology, we send, receive, or store bulky amount of critical organizational information such as files, documents, etc. in each day (Salgovicova and Prajova, 2012). Various researchers relate information security (InfoSec) problems with the technical aspects of the users or employees such as skill, knowledge, and competencies (Henry et al, 2018). Shropshire et al (2006) and Taherdoost (2016 & 2017) found lack of users InfoSec awareness as a number one obstacle to achieve the good InfoSec posture of the user as well as the organization. They suggested continuous and periodic InfoSec awareness trainings as a solution to improve the InfoSec performance (confidentiality, integrity, and availability or CIA) of users or reduce InfoSec related threats. Because InfoSec is not a single matter of Information Technology, rather it’s beyond the technical aspect of InfoSec awareness in that it incorporates the various psychological constructs (e.g., security-sensitive personality types) of the users

Objectives
Methods
Conclusion

Talk to us

Join us for a 30 min session where you can share your feedback and ask us any queries you have

Schedule a call

Disclaimer: All third-party content on this website/platform is and will remain the property of their respective owners and is provided on "as is" basis without any warranties, express or implied. Use of third-party content does not indicate any affiliation, sponsorship with or endorsement by them. Any references to third-party content is to identify the corresponding services and shall be considered fair use under The CopyrightLaw.