Information Security Compliance Intentions: Role of Contingent Employees

As the reliance on Information Systems (IS) by organisaitons for process improvement, operational excellence and competitive advantage continue to intensify, various information security risk prevention technologies have become available. It is apparent that exclusive reliance on technologies like firewalls, intrusion detection systems, and anti-virus software are not enough and should be complemented with employees’ compliance with IS security policies. However, research on the compliance intentions among contingent employees is limited. This paper synthesizes existing literature on factors that determine information system security policy (ISSP) compliance while prioritizing contingent employees given the differences in their contractual arrangements. The paper proposes a conceptual framework that explains the intentions of contingent employees to comply with ISSPs. We propose that Subjective Norm, Deterrence, and Involvement mechanisms are effective in promoting contingent employees’ ISSP compliance intentions. The study highlights the need for organisations to review their ISSPs to address the issue of contingent employees.