國立虎尾科技大學 |

Bring your own device security policy compliance framework

Record Type:	Language materials, printed : Monograph/item
Title/Author:	Bring your own device security policy compliance framework/ by Rathika Palanisamy ... [et al.].
other author:	Palanisamy, Rathika.
Published:	Cham :Springer Nature Switzerland : : 2025.,
Description:	xxii, 196 p. :ill. (some col.), digital ; : 24 cm.;
Contained By:	Springer Nature eBook
Subject:	Computer security. -
Online resource:	https://doi.org/10.1007/978-3-031-86801-6
ISBN:	9783031868016

Bring your own device security policy compliance framework
Bring your own device security policy compliance framework[electronic resource] /by Rathika Palanisamy ... [et al.]. - Cham :Springer Nature Switzerland :2025. - xxii, 196 p. :ill. (some col.), digital ;24 cm. - Information systems engineering and management,v. 373004-9598 ;. - Information systems engineering and management ;v. 1..

Introduction -- Bring Your Own Device -- Theoretical Framework and Hypotheses Development -- Research Methodology -- Analysis, Results and Discussion -- Conclusion and Future Work.

Proliferation of Bring Your Own Device (BYOD) has instigated a widespread change, fast outpacing the security strategies deployed by organizations. The influx of these devices has created information security challenges within organizations, further exacerbated with employees' inconsistent adherence with BYOD security policy. To prevent information security breaches, compliance with BYOD security policy and procedures is vital. This book aims to investigate the factors that determine employees' BYOD security policy compliance by using mixed methods approach. Security policy compliance factors, BYOD practices and security risks were identified following a systematic review approach. Building on Organizational Control Theory, Security Culture and Social Cognitive Theory, a research framework positing a set of plausible factors determining BYOD security policy compliance was developed. Next, with a purposive sample of eight information security experts from selected public sector organizations, interviews and BYOD risk assessments analysis were performed to furnish in-depth insights into BYOD risks, its impact on organizations and recommend control measures to overcome them. This led to the suggestion of four control measures to mitigate critical BYOD security risks such as Security Training and Awareness (SETA), policy, top management commitment and technical countermeasures. The control measures were mapped into the research framework to be tested in the following quantitative phase. The proposed research framework was tested using survey results from 346 employees of three Critical National Information Infrastructure (CNII) agencies. Using Partial Least Squares - Structural Equation Modelling (PLS-SEM), the framework's validity and reliability were evaluated, and hypotheses were tested. Findings show that perceived mandatoriness, self-efficacy and psychological ownership are influential in predicting employees' BYOD security policy compliance. Specification of security policy is associated with perceived mandatoriness, while BYOD IT support and SETA are significant towards self-efficacy. Unexpectedly, security culture has been found to have no significant relationship to BYOD security policy compliance. Theoretical, practical, and methodological contributions were discussed and suggestions for future research were recommended. The analysis led to a number of insightful findings that contribute to the literature and the management, which are predominantly centered on traditional computing. In view of the ever-increasing BYOD threats to the security of government information, it is imperative that IT managers establish and implement effective policies to protect vital information assets. Consequently, the findings of this study may benefit policymakers, particularly in the public sector, in their efforts to increase BYOD security policy compliance among employees.

ISBN: 9783031868016

Standard No.: 10.1007/978-3-031-86801-6doiSubjects--Topical Terms:

557122
Computer security.

LC Class. No.: QA76.9.A25

Dewey Class. No.: 005.8

Bring your own device security policy compliance framework
LDR:04197nam a2200337 a 4500 001 1161460
003 DE-He213
005 20250330112912.0
006 m d
007 cr nn 008maaau
008 251029s2025 sz s 0 eng d
020 $a 9783031868016 $q (electronic bk.)
020 $a 9783031868009 $q (paper)
024 7 $a 10.1007/978-3-031-86801-6 $2 doi
035 $a 978-3-031-86801-6
040 $a GP $c GP
041 0 $a eng
050 4 $a QA76.9.A25
072 7 $a UN $2 bicssc
072 7 $a COM018000 $2 bisacsh
072 7 $a UN $2 thema
082 0 4 $a 005.8 $2 23
090 $a QA76.9.A25 $b B858 2025
245 0 0 $a Bring your own device security policy compliance framework $h [electronic resource] / $c by Rathika Palanisamy ... [et al.].
260 $a Cham : $c 2025. $b Springer Nature Switzerland : $b Imprint: Springer,
300 $a xxii, 196 p. : $b ill. (some col.), digital ; $c 24 cm.
490 1 $a Information systems engineering and management, $x 3004-9598 ; $v v. 37
505 0 $a Introduction -- Bring Your Own Device -- Theoretical Framework and Hypotheses Development -- Research Methodology -- Analysis, Results and Discussion -- Conclusion and Future Work.
520 $a Proliferation of Bring Your Own Device (BYOD) has instigated a widespread change, fast outpacing the security strategies deployed by organizations. The influx of these devices has created information security challenges within organizations, further exacerbated with employees' inconsistent adherence with BYOD security policy. To prevent information security breaches, compliance with BYOD security policy and procedures is vital. This book aims to investigate the factors that determine employees' BYOD security policy compliance by using mixed methods approach. Security policy compliance factors, BYOD practices and security risks were identified following a systematic review approach. Building on Organizational Control Theory, Security Culture and Social Cognitive Theory, a research framework positing a set of plausible factors determining BYOD security policy compliance was developed. Next, with a purposive sample of eight information security experts from selected public sector organizations, interviews and BYOD risk assessments analysis were performed to furnish in-depth insights into BYOD risks, its impact on organizations and recommend control measures to overcome them. This led to the suggestion of four control measures to mitigate critical BYOD security risks such as Security Training and Awareness (SETA), policy, top management commitment and technical countermeasures. The control measures were mapped into the research framework to be tested in the following quantitative phase. The proposed research framework was tested using survey results from 346 employees of three Critical National Information Infrastructure (CNII) agencies. Using Partial Least Squares - Structural Equation Modelling (PLS-SEM), the framework's validity and reliability were evaluated, and hypotheses were tested. Findings show that perceived mandatoriness, self-efficacy and psychological ownership are influential in predicting employees' BYOD security policy compliance. Specification of security policy is associated with perceived mandatoriness, while BYOD IT support and SETA are significant towards self-efficacy. Unexpectedly, security culture has been found to have no significant relationship to BYOD security policy compliance. Theoretical, practical, and methodological contributions were discussed and suggestions for future research were recommended. The analysis led to a number of insightful findings that contribute to the literature and the management, which are predominantly centered on traditional computing. In view of the ever-increasing BYOD threats to the security of government information, it is imperative that IT managers establish and implement effective policies to protect vital information assets. Consequently, the findings of this study may benefit policymakers, particularly in the public sector, in their efforts to increase BYOD security policy compliance among employees.
650 0 $a Computer security. $3 557122
650 1 4 $a Data Engineering. $3 1226308
650 2 4 $a Data and Information Security. $3 1365785
650 2 4 $a Security Services. $3 1211616
650 2 4 $a Principles and Models of Security. $3 1225876
650 2 4 $a Mobile and Network Security. $3 1211619
700 1 $a Palanisamy, Rathika. $3 1488389
710 2 $a SpringerLink (Online service) $3 593884
773 0 $t Springer Nature eBook
830 0 $a Information systems engineering and management ; $v v. 1. $3 1455467
856 4 0 $u https://doi.org/10.1007/978-3-031-86801-6
950 $a Intelligent Technologies and Robotics (SpringerNature-42732)