Influence of security compliance demands and resources on security compliance-an exploratory study in Vietnam

This study extends current information security compliance research by adapting "work-stress model" of the Job Demands-Resources (JD-R) model to explore how security compliance demands and security resources influence the system users' information security compliance. The paper proposes that security compliance burnout and security engagement as the mediating factors between security compliance demands, security resources and individual security compliance. We employed a multi-case study method to explore the characteristics of security compliance demands and security resources that could influence security compliance. Interviews with system users in three organisations in Vietnam revealed three types of security compliance and four types of security resources that may influence security compliance burnout and engagement respectively. Practical implications of the initial findings are also presented.