Theory of Planned Behavior (TPB) and the Information Security Policy

Abstract

Compliance with Information Security Policies (ISP) is essential in institutions. Understanding the relationship between individual’s behavior toward compliance with the ISP has given rise to various proposals using different theories, including the TPB (Theory of Planned Behavior). Based on the literature review, the purpose of this article is to understand how the constructs of TPB, such as subjective norms, perceived behavioral control, and attitude, influence an employee’s intention to comply with the ISP. A total of 18 articles were selected to examine the proposed models and the relationship between each of the TPB constructs and compliance with the ISP, directly or indirectly. The results suggest that the constructs of the TPB are related to the intention of the collaborators to comply with the ISP.