Association between stress and information security policy non-compliance behavior: A meta-analysis

Stress plays a critical role in information security policy (ISP) compliance behavior. Since there are multi-ple sources of stress, the current literature does not provide a consistent view of the association between stress and ISP compliance behavior. Understanding the significance of the association between stress and ISP compliance behavior is valuable for managers, especially in managing the tradeoff between stress and ISP compliance behavior among individuals. It is also important to understand why there has been so much inconsistency in past studies. Thus, we attempted a meta-analysis to provide a generalized in-terpretation of the association between stress and ISP non-compliance behavior. A systematic literature review and a meta-analysis are conducted to examine the underlying contradiction and aggregate the findings of relevant studies. The results of this meta-analysis confirmed a weak positive correlation be-tween stress and ISP non-compliance behavior. Demographic characteristics like age, country, and the category of the respondents (employee vs non-employee) are significant predictors of the association be-tween stress and ISP non-compliance behavior. The meta-analysis presented here is also pertinent to the recent COVID-19 pandemic, which forced organizations to engage with their employees in new working conditions, putting employees under more stress and strain.(c) 2022 Elsevier Ltd. All rights reserved.

Automated summary

Stress plays a critical role in ISP compliance behavior, but there is inconsistency in the association between stress and compliance. Factors such as age, country, and respondent category influence this association. This has valuable implications for managers and is relevant to the COVID-19 pandemic.