OBJECTIVE: The focus of this research was on the indirect effects of management support (MS) on user compliance behaviour (UCB) towards information security policies (ISPs) among health professionals in selected Malaysian public hospitals. The aim was to identify significant factors and provide a clearer understanding of the nature of compliance behaviour in the health sector environment.
METHOD: Using a survey design and stratified random sampling method, self-administered questionnaires were distributed to 454 healthcare professionals in three hospitals. Drawing on theories of planned behaviour, perceived behavioural control (self-efficacy (SE) and MS components) and the trust factor, an information system security policies compliance model was developed to test three related constructs (MS, SE and perceived trust (PT)) and their relationship to UCB towards ISPs.
RESULTS: Results showed a 52.8% variation in UCB through significant factors. Partial least squares structural equation modelling demonstrated that all factors were significant and that MS had an indirect effect on UCB through both PT and SE among respondents to this study.
CONCLUSION: The research model based on the theory of planned behaviour in combination with other human and organisational factors has made a useful contribution towards explaining compliance behaviour in relation to organisational ISPs, with trust being the most significant factor. In adopting a multidimensional approach to management-user interactions via multidisciplinary concepts and theories to evaluate the association between the integrated management-user values and the nature of compliance towards ISPs among selected health professionals, this study has made a unique contribution to the literature.
METHODS: A qualitative research method was adopted with face-to-face interviews, using a semi-structured interview guide. Purposive and snowball sampling techniques were used to recruit a convenient sample of CPs who were practising in the Federal Territory of Kuala Lumpur, Malaysia. All interviews were audio recorded and transcribed verbatim. The data were analysed by the research team using a thematic content analysis framework.
RESULTS: Eleven CPs participated in the study. Participants reported that online health-related information was accessible, useful, fast, and in some respects, the Internet is a unique source of information. It was reported that there was a need to establish websites for trusted information. CPs also reported that training was needed in Internet searching and website evaluation skills. Most information accessed by CPs related to drugs and diseases and to knowledge-based information. Barriers to efficacy of Internet usage were related to the reliability and volume of information available on the Internet.
CONCLUSION: Frequent use of online health-related information among CPs was reported. Many CPs supported the use of the Internet for health-related information but certain reservations were also reported. An analysis of the reasons for information seeking and barriers suggests that a wider range of influences on health information seeking should be investigated.