Information Security Policies and Factors Related to Compliance

Bayona-Oré S.; Ochoa N.F. · RISTI - Revista Iberica de Sistemas e Tecnologias de Informacao (2022)

Resumen

Organizations have incorporated information technologies to improve the products and services they offer to users. In this context, Information Security (IS) is considered key to saving the organization’s most important asset, information. Compliance with established policies is a topic of interest in Information Security. This article presents a quantitative, descriptive, cross-sectional investigation on the critical factors in compliance with the information security policy (ISP). The sample consisted of 108 security professionals. The results show that the factors organizational commitment and awareness of the PSI obtained percentages of 92% and 90% respectively, between the values “Always” and “Almost always”, while the factors perceived severity and self-efficacy obtained 84% and 81% respectively.

Instituciones: Universidad Nacional Mayor de San Marcos; Universidad Autónoma del Perú