This paper explores cybersecurity compliance behavior in organizations, focusing on the interplay of individual and organizational factors. Employing Protection Motivation Theory (PMT), the Theory of Planned Behavior (TPB), and Organizational Culture Theory (OCT), the study examines how employees’ perceptions of threat severity, vulnerability, response efficacy, and response cost influence their compliance intentions. It also assesses the impact of organizational cybersecurity efforts and employee security awareness. The research, guided by insights from Rogers, Ajzen, and Schein, utilizes a quantitative methodology with Partial Least Squares Structural Equation Modeling (PLS-SEM) and Necessary Condition Analysis (NCA) to analyze complex relationships between these factors. The findings highlight the significant role of individual decision-making styles, organizational culture, and the effectiveness of security technologies in shaping cybersecurity compliance. This study contributes to the literature by providing a comprehensive understanding of cybersecurity compliance behavior, offering valuable insights for organizations to develop effective strategies and enhance their cybersecurity posture in an increasingly digital world.
Ahsan et al. (Sat,) studied this question.