Does Explicit Information Security Policy Affect Employees' Cyber Security Behavior? A Pilot Study

In this pilot study, we have (i) examined the relative importance of ten factors that can be used for developing new training methods and materials to improve employees' awareness and skills to defend against cyber risks, and (ii) investigated the relationship between an explicit security policy at the organizational level and individual employee's behavior and beliefs toward cybersecurity issues. Our results show that an explicit cybersecurity policy does positively affect employee's behavior towards information security risks. The insights drawn from this pilot study can be employed toward encouraging and enhancing employees' cybersecurity behavior both in the workplace and outside the workplace.