Employee’s Conformity to Information Security Policies- The Case of a Nigerian Business Organizations

Abstract

We evaluated employee’s conformity to information security policies using four research questions and three researchhypotheses. A survey research methodology was used to evaluate staff of the case study (Skannet) using both questionnairesand interview. Data gathered were analysed using both descriptive and inferential statistics. The findings of this study revealthat majority of Skannet’s employees have adequate knowledge of Skannet’s information security policies. However, thelevel of employees’ compliance with the ICT policies is very low. Among organizational measures put in place by Skannetto ensure information security compliance include regular training / re-training for staffs on policies, regular survey sent toall staff to test level of awareness and punitive measures by Human Resource Department. The study further revealed thatSkannet’s Information Security policy positively affect the attainment of organizational goals such as improvement inquality of services, promotion of information sharing, transparency and accountability among staffs in the organization.Keywords: Policies, security, compliance, training and services.