## 4 Results and Analysis
### Analysis of Compliance Behavior
#### 4.1.5 Management Behaviors and Compliance
\begin{table}
\begin{tabular}{c c c c} \hline \hline
**Authors** & **Research Method** & **Sample Size** & **Findings** \\ \hline
[16] & Qualitative study & 47 semi-structured interviews conducted & Different modes of behavior affect information security culture differently in organizations \\ \hline
[49] & Quantitative study. SEM used for Model testing & 148 responses collected from a public university & Top management can cultivate good security culture, and a security culture help shaping employees’ behavior towards ISPC \\ \hline
[68] & Mix method research methodology adopted. SPSS is used for descriptive analysis, and PLS is used for data analysis. & 513 responses were collected from 4 Finnish firms & Different levels of ISP knowledge influence information security behavioral compliance \\ \hline
[46] & A quantitative study, PLS used for hypothesis testing & 127 correct response were collected from various organizations & Security culture and organizational behavior are the vital drivers of ISPC \\ \hline
[47] & Mixed methodology adapted. Data and model tested with SEM & 212 IS experts and professionals participated from different Malaysian firms & Security awareness, organizational security policy, threat appraisal, and self-efficacy positively affect employees’ information security-conscious care behaviors \\ \hline
[17] & The quantitative research methodology was adopted, and the model was tested with PLS. & 535 usable responses collected from a university & Attitude and intention are significant predictors of actual early compliance behavior towards ISP \\ \hline
[33] & Systematic literature review & A total of 32 articles and eight professional frameworks were analyzed regarding users’ competencies associated with ISP compliance \\ \hline \hline \end{tabular}
\end{table} 
Table 7: Studies on culture/security awareness behaviors and compliance. contract. The research model was tested upon two groups' managers and employees. Their results showed that psychological contract is an essential factor. It has significant effects on ISP compliant behavior; furthermore, the psychological contract has more significant effects on manager groups than employees. The perception of corporate social responsibility (the way to manage companies' business process) on employees' ISP behavior was evaluated by [74]. These researchers examined RCT constructs' effects (cost of compliance, the benefit of compliance, and cost of noncompliance) and corporate social responsibility dimensions (moral, discretionary, relational) upon employees' ISB. This study concluded that only the moral dimension of corporate social responsibility has significance towards ISP compliance. There is no effect of the cost of compliance on the ISB of employees. Reference [75] provided a quantitative analysis of information security assurance behavior (intense password usage and regular data backups). This study's authors proposed that social learning factors and security monitoring significantly affect employees' security assurance behavior. It has been shown that monitoring has substantial effects on an increase in assurance behavior, whereas employees perceived inconvenience (behaviors difficult to adopt) for the employees has adverse effects on assurance behavior. Reference [76] identified employment status (permanent and temporary) as a critical behavioral factor influencing ISP compliance. This study evaluated differences in organizational commitment and perceived organizational support among permanent and temporary employees. The authors concluded that permanent employees have more positive behavior towards ISP compliance than temporary employees. Reference [77] briefly explained shadow IT security behavior (unauthorized software use and download), which significantly affects ISP compliance. The central theme of the study is based on the theory of individual and organizational inertia. These researchers examined the effects of individual and organizational inertia on shadow IT security behavior.