Human factors in information security: Linking organizational citizenship behavior with control effectiveness: Evidence and implications for a Regional Rural Bank in Northeast India

Information security measures in banking are frequently developed as technological artifacts, and human behavior in daily operations determines how they will function. This theoretical paper develops a human factors model that links organizational citizenship behavior (OCB) to security control effectiveness, with a focus on extra-role behaviors such as helping colleagues adhere to security practices, reporting anomalies early, and proactively improving routine activities. This study’s environment is a Regional Rural Bank (RRB), where operational constraints like role overlap, staff shortages, dealing with rural clients, and reliance on outside parties could jeopardize incident reporting and control accuracy. In this paper, we contend that the security-related citizenship functions as a control multiplier that enhances (i) control operation quality (fewer bypasses, higher execution fidelity, and good detection signals) and (ii) the control lifecycle, drawing on current behavioral information security literature. Using regression-based mediation/moderation analysis and multi-source field data, we would like to introduce a bank-ready evaluation design coupled with a conceptual model and testable hypothesis. Useful advice will be provided on security championship, microlearning, stewardship framing, and verified control improvement loops, which will be appropriate for RRB branches.