<\/p>\n\n\n\n
Ghaleb and Pardaev (2025) examine how workplace and human factors influence whether employees follow information security policies. This connects to social science through organizational culture, human behavior, and trust. An organization\u2019s culture can shape what employees see as normal and expected behavior. Awareness can affect how employees recognize and respond to cyber threats, while trust can influence whether employees take management\u2019s security expectations seriously. This shows how cybersecurity involves more than just technology because people\u2019s attitudes, relationships, and work environments also affect security behavior.<\/p>\n\n\n\n
The study asks how organizational culture affects security compliance, how much cybersecurity awareness influences compliance, whether employee engagement changes those relationships, and whether trust in upper management acts as a mediator. From these questions, the researchers developed six hypotheses. They predicted that culture and awareness would influence compliance, employee engagement would moderate those relationships, and trust in upper management would mediate them. All six hypotheses were supported.<\/p>\n\n\n\n
The researchers used a quantitative research method and collected survey data from 261 employees in production companies. Previously tested scales were used to measure organizational culture, cybersecurity awareness, employee engagement, trust in upper management, and information security compliance behavior. The researchers analyzed the data using Structural Equation Modeling (SEM) in STATA. They also used correlations and model-fit statistics to examine relationships between the variables and determine how well their proposed model fit the data.<\/p>\n\n\n\n
This article also connects to concepts we have discussed in class, especially human factors, organizational behavior, and how a person\u2019s social environment can influence cybersecurity decisions. The findings show why organizations cannot depend only on technical security controls. Employees and their behavior are also an important part of cybersecurity.<\/p>\n\n\n\n
The study did not specifically examine marginalized groups, which is an important limitation. One concern is unequal access to cybersecurity education and training, since employees from different backgrounds may not have the same previous experience with technology. Another concern is inclusion and trust in the workplace. Employees who feel excluded or unsupported may experience workplace culture and management differently. These differences should be considered when organizations create cybersecurity training and policies instead of assuming every employee has the same experience.<\/p>\n\n\n\n
Overall, the study makes two major contributions. First, it brings culture, awareness, engagement, and trust together in one model for understanding security compliance. Second, it gives organizations evidence that improving cybersecurity should include employee awareness, engagement, workplace culture, and trustworthy leadership, not just technical security tools.<\/p>\n\n\n\n
<\/p>\n\n\n\n
Reference<\/strong><\/p>\n\n\n\n Ghaleb, M. M. S., & Pardaev, J. (2025). Controlling cyber crime through information security compliance behavior: Role of cybersecurity awareness, organizational culture and trust in management. International Journal of Cyber Criminology, 19<\/em>(1), 1\u201326.<\/p>\n","protected":false},"excerpt":{"rendered":" Ghaleb and Pardaev (2025) examine how workplace and human factors influence whether employees follow information security policies. This connects to social science through organizational culture, human behavior, and trust. An organization\u2019s culture can shape what employees see as normal and expected behavior. Awareness can affect how employees recognize and respond to cyber threats, while trust… <\/p>\n