Social control through deterrence on the compliance with information security policy

Information system security (ISS) has become an extremely significant issue in organizations to protect information as an organizational asset. The purpose of this study is to investigate what factors affect individuals' perception of sanction threats. This study uses social control theory to understand the effects of deterrence on public corporation employees' ISS compliance and elucidate employees' motivations of ISS violation and different perceptions of sanction threats. The effects and their significance in the model were tested. The results of this study help information security institutions to consider deterrence and self-punishment and to manage compliance with information security policy effectively and securely.