Does Explicit Information Security Policy Affect Employees´ Cyber Security Behavior? A Pilot Study

In this pilot study, we have (i) examined the relative importance of ten factors that can be used for developing new training methods and materials to improve employees´ awareness and skills to defend against cyber risks, and (ii) investigated the relationship between an explicit security policy at the organizational level and individual employee´s behavior and beliefs toward cybersecurity issues. Our results show that an explicit cybersecurity policy does positively affect employee´s behavior towards information security risks. The insights drawn from this pilot study can be employed toward encouraging and enhancing employees´ cybersecurity behavior both in the workplace and outside the workplace.