Effect of Institutional Pressure on Byod Information Security Policy Compliance: a Case of Two Private and Two Public Kenyan Universities

Abstract

The rising acknowledgment of the importance of information security has created institutional pressures on universities to comply with Bring Your Own Device information security standards and policies for protecting their information. How such pressures influence Bring Your Own Device information security policy compliance in universities, however, is unclear. This research presents an empirical study to investigate the effect of institutional pressure on Bring Your Own Device information security policy compliance. With the use of multiple regression analysis for analyzing the data collected through an online survey, the study shows that coercive pressures, normative pressures, and mimetic pressures positively influence Bring Your Own Device information security policy compliance in universities. It reveals that institutional pressure achieves higher percentage in Bring Your Own Device information security policy compliance if mediated by information security awareness. Theoretically this study contributes to the information security research by better understanding how institutional pressures can be used for enhancing Bring Your Own Device information security policy compliance in universities. Practically this study informs information security policy makers of the major institutional drivers for Bring Your Own Device information security policy compliance. Keywords: information security; institutional pressures; information security compliance; information security awareness; Bring Your Own Device ;empirical study.