Paper Info
Title
The role of cybersecurity and policy awareness in shifting employee compliance attitudes: Building supply chain capabilities
Abstract
This paper investigates the role of general cybersecurity and cybersecurity policy awareness in enhancing supply chain cyber resilience reactive capabilities. Theorizing from the Protection Motivation Theory, 200 Small and Medium Enterprises (SMEs) were contacted to understand their perception of cybersecurity and policy awareness in affecting their overall cybersecurity hygiene. Data collection was carried out using a questionnaire survey and analysed via Partial Least Squares-based Structural Equation Modelling to validate the research framework. Results of analysis outlined the importance of general cybersecurity and policy awareness in shifting employees’ compliance attitude towards enhancing supply chain reactive capability. Using a mixed-method approach, post-survey interviews were further conducted with practitioners in SMEs to understand the study findings. The implications outlined in this study emphasises the importance of prioritising preventive measures and proper employee cyber hygiene to address the risk and loss following a cyber-attack. Key supply chain operational areas in SMEs are still largely supported by the human workforce serving as its backbone. An unwarranted attack could cause adverse business impacts. Thus, practitioners and SMEs would be alerted to the critical need for a robust security posture and that SMEs’ need of the hour lies at the core of its policy and employee cybersecurity hygiene.
Year
DOI
Venue
2022
10.1016/j.ijinfomgt.2022.102520
International Journal of Information Management
Keywords
DocType
Volume
Cybersecurity awareness,Small medium enterprises,Supply chain attack,Resilience,Cybersecurity policy,COVID-19
Journal
66
ISSN
Citations 
PageRank 
0268-4012
0
0.34
References 
Authors
0
5
Name
Order
Citations
PageRank
Lai-Wan Wong100.34
Voon-Hsien Lee200.34
Garry Wei-Han Tan300.34
Keng-Boon Ooi4114.52
Amrik Sohal500.34