The impact of leadership in cybersecurity risk management on information security policy compliance and perceived information security success: The moderating role of IT complexity

Recent information security research increasingly highlights the impact of complexity on data breaches.Information Technology (IT) complexity, characterized by overwhelming information, system interdependence, and rapid technological change, can impair decision-making, hinder policy compliance, and diminish overall security outcomes.This paper investigates how cybersecurity leadership promotes policy adherence and supports successful security practices, while also showing that excessive IT complexity can undermine this influence.Data from 135 subjects were collected, and the results indicate that IT complexity moderates the relationship between cybersecurity leadership and information security policy compliance.