Compliance with information security policies: An empirical investigation

This paper primarily focuses on information security, specifically examining compliance with information security policies. The author questions the seemingly insignificant relationship between rewards and actual compliance with these policies, suggesting that this might be due to the lack of rewards for security compliance. The paper also highlights that, based on a survey, negligent employee behavior can pose a serious risk to an organization’s assets and reputation. It underscores that the major threat to information security stems from careless employees who do not adhere to the organization’s information security policies and procedures.