Information Security Policy Compliance

Protecting key information assets from security attacks, cyber threats, and data breaches is critically important for organizations. Information security policies (ISPs) establish guidelines to safeguard sensitive data, reduce risks, and promote secure employee behavior. However, internal employees' careless or malicious actions often lead to significant security vulnerabilities. Consequently, information security policy compliance (ISPC) has become a vital focus for both academics and practitioners. Given the diverse and vast ISPC literature, an integrative review is needed to unify scattered knowledge and identify future research hotspots. This study uses scientometric analysis and topic modeling to provide a structured retrospective, highlighting key contributors, influential articles, institutions, and evolving themes to guide future research directions.