The Security Information Policies and the Employees in the Software Sector: An Empirical Study in México

Abstract

This study is aimed to discover the reasons for the employees to accept or not the Security Information Policies implemented in their organisations (SIPC), in México. Five Factors are considered: Attitude (ATT); Self Efficacy (SEF); Information Perceptions (IFP); Rewards (REW) and Penalties (PNY) with 21 Variables as indicators. A questionnaire was designed and applied to 195 employees involved in the SME Software Sector in Guadalajara (SSG) México that conform the value chain, including: designers, manufacturers and suppliers; the confidence was measured with Cronbach’s Alpha (.87) and it was applied Structural Equations Modelling (SEM) to discover the 3 SIPC underlying variables in the mode The organisations must be aware about these results, because a great percentage of the attacks are originated from inside by an or few employees who consciously (or not) are not following the procedures and standards that the policies described.

Keywords: Security Information Policies, Employees, Software Sector in México

JEL Classification: M15