## 4 Discussion and Conclusions
Personal variables, namely, usage behavior, were found to significantly affect the expected outcome (H4) and security inconvenience (H5). Usage behavior was examined based on employees' experience in using mobile devices to store confidential data in terms of frequency, security utility, and benefits. It was predicted that usage behavior forms employees' first-hand experience on security issues, and the results show support for this notion. Higher usage behavior could be associated with positive expected outcomes and reduced security inconvenience. Hence, for organizations keen to implement a bring-your-own-device (BYOD) campaign, it would be beneficial if employees are first entrusted with low levels of mobile access; the access can be increased as they become more experienced users. The evolution of BYOD will be inclusive and refined according to employer and employee expectations. Security awareness, another personal variable examined, was found to negatively affect security inconvenience (H7) and positively affect expected outcomes (H6). Higher security awareness is, therefore, associated with lower security inconvenience and higher expected outcomes. Security awareness thus favorably affects employees' cost-benefit considerations towards implementing good mobile security measures. This indicates the significance of enhancing security awareness among employees. As employees are the most vulnerable connection within the security defense mechanism, the employer should create the right awareness program to educate employees about good security practices and, thus, limit the possibility of security breaches. Implementing security awareness will ensure desirable security behavior and compliance among the employees in using mobile devices for their official tasks and responsibility. Three organizational variables were tested in this study, namely, security monitoring, job characteristics, and security training. Security monitoring was determined to negatively affect both expected outcome (H8) and security inconvenience (H9). It could be deduced from the results that security monitoring hampers the anticipated benefits of mobile devices, although it somehow reduces security inconvenience, perhaps due to increased awareness or familiarity among the employees. Hence, organizations, through security monitoring, should have a better understanding of employees' ways of handling mobile devices and its security practices while leveraging the usefulness of mobile devices. Organizations should consider implementing applications for the verification and enforcement of mobile security policies, such as those deliberated by [PERSON] et al. [63], [PERSON] et al. [64], and [PERSON] et al. [65]. This is an area where application developers should exert more focus since the existing technologies to oversee BYOD implementation are still in infancy and are perhaps even less understood among the employees [66; 67]. Job characteristics, in terms of handling sensitive information and data, were found to significantly affect usage behavior (H10), security awareness (H11), and expected outcome (H12). The findings provide evidence that employees who are entrusted with the care of confidential data are more likely to be more experienced in handling such data and, thus, more confident, have higher security awareness, and anticipate more positive outcomes from mobile security practices. This study, however, could not establish any relationship between job characteristics and security inconvenience (H13). Finally, security training was found to significantly affect security awareness (H14). This finding showed evidence of security training in enhancing security awareness. Thus, conducting security training, especially on mobile security practices, would be beneficial whenever organizations have the intention to implement a BYOD program. Security training nurtures and develops a culture of security in the organization, leading to awareness of potential security breaches and the relevant security measures.