## 4 Results and Analysis
### Analysis of Compliance Behavior
#### 4.1.4 Security Culture, Awareness Behaviors and Compliance  
Organization management enhances security-aware behaviors of employees, which later guarantee good security culture. Reference [16] identifies four information security behavior modes (Not Knowing-Not Doing, Not Knowing-Doing, Knowing-Not Doing, Knowing-Doing) contributing to security culture. The researchers argued that employees' knowledge and skills significantly affect ISP compliance and develop a good security culture. Employees often consider that information security is the IT staff's responsibility, so they themselves are not part of IS security. For changing the views of employees, organizations must cultivate a good security culture, and top management should play its role. \begin{table}
\begin{tabular}{c c c c} \hline \hline
**Authors** & **Research Method** & **Sample Size** & **Findings** \\ \hline \multirow{4}{*}{[24]} & The mixed research methodology adopted, and STATA software was used for model fitness and hypotheses testing & \multirow{4}{*}{A total of 452 business and psychology students participated} & For measuring protection motivation behaviors, researchers must use core and full constructs of protection motivation theory (PMT) \\ \hline \multirow{4}{*}{[32]} & Literature Review & A total of 30 research articles reviewed & PMT explains voluntary security behavior better than mandatory. PMT predicts better ISB if the threat and the coping process are specific, and PMT is a good predictor of ISB for individuals’ threats, not the organizational threats \\ \hline \multirow{4}{*}{[62]} & Mixed method approach used and PLS used for research model testing & 559 insiders participated from the city government of Finland & Enhanced fear appeal with PMT has better results on ISPC \\ \hline \multirow{4}{*}{[54]} & The longitudinal research design was adopted. PLS is used for data and model testing & 253 valid responses were collected & Self-efficacy perceived threat severity, and perceived threat susceptibility significantly affect employees’ continue protective behaviors \\ \hline \multirow{4}{*}{[63]} & The quantitative research design adopted SEM used for model and hypothesis testing & 377 usable responses from the public and private organizations & Psychological capital has positive effects on employees’ protective motivated behaviors \\ \hline \multirow{4}{*}{[64]} & Mixed method research with multidimensional scaling analysis & Seven expert interviews and 279 computer users participated & Users perform multiple security behaviors to deal with security threats. Response efficacy and response cost help users to choose security protection behaviors \\ \hline \multirow{4}{*}{[65]} & The quantitative research methodology adopted regression is used for data and model testing & 526 employees participated & Along with additional parameters, PMT s threat appraisal was less predictive than coping appraisal to detect employees’ intent to engage in antimalware behaviors \\ \hline \multirow{4}{*}{[66]} & Quantitative study design and SEM used for results analysis & 70 responses IT personals collected from New Zealand & Perceived impact and self-efficacy have positive effects on intention to practice information security \\ \hline \multirow{4}{*}{[45]} & Scenario-based quantitative study design. PLS used for model testing & \multirow{4}{*}{261 participants from a university} & Dimensions of moral intensity and organization criticality have significant effects on insiders’ protection behaviors \\ \hline \multirow{4}{*}{[27]} & Quantitative study. SEM used for model and hypothesis testing & 206 correct responses were collected from the higher education sector & PMT is the best predictor of employees’ behavior towards ISPC in the higher education sector \\ \hline \multirow{4}{*}{[67]} & Quantitative research design & 433 employees participated in this study & Self-efficacy and morality are the most influential factors of ISB. \\ \hline \hline \end{tabular}
\end{table} 
Table 6: Cont.