## 4 Results and Analysis
### Analysis of Compliance Behavior
#### 4.1.7 Actual Behavior and Compliance  
Most ISPC studies evaluated the employees' intentions, but intention alone is not enough to measure one's behavior. Some of the studies argued that intention is the strongest predictor of actual compliance. Few studies evaluate employees' actual behaviors. Reference [15] presented a multitheoretical framework to measure employees' actual compliance with ISP. These researchers used the TRA, PMT, and Deterrence theory constructs to measure actual compliance behavior towards ISP. This study's results suggested PMT constructs (threat appraisal self-efficacy response efficacy) and visibility positively affect the intention to comply with ISP. In contrast, intention and deterrence constructs have significant predictors of actual compliant behavior. Reference [90] explained and illustrated intended behavior and actual behavior; the researcher described a gap between intended behavior and actual behavior; moreover, he examined the factors influencing intended behavior towards actual behavior. \begin{table}
\begin{tabular}{c c c c} \hline \hline
**Authors** & **Research Method** & **Sample Size** & **Findings** \\ \hline
[89] & Quantitative research & & Social and individual factors have \\
[89] & methodology adapted, and SPSS & 400 participants from the & positive effects on information security \\  & used for instrument validation & Malaysian army & compliant behavior \\  & and regression analysis & & \\ \hline
[82] & The quantitative research & & Social, cognitive, and psychological \\  & methodology used, SEM used for & 68 employees of different & factors influence information security \\  & hypotheses testing and & firms responded & behavior towards ISP \\  & data analysis. & & \\ \hline
[83] & The qualitative research & & A total of 33 semi-structured \\  & methodology adopted & interviews (22 from insiders and & Insiders adopt behaviors from social \\  & & 11 from security professionals) & influence; they depend on knowledge \\  & & conducted from different sectors & from one another \\  & & of the US & \\ \hline
[41] & Quantitative research & 217 employees and 78 IS & Extrarole behaviors and in role \\  & methodology with SEM testing. & 78 different organizations in & behaviors have significant effects on \\  & & Taiwan & ISP effectiveness \\ \hline
[84] & The quantitative research & & ISP-related personal norms have \\  & methodology adopted, and PLS is & 201 employees participated & positive effects on information security \\  & used for data testing & & compliance behavior \\ \hline
[85] & Quantitative method used for data and & 462 correct responses were & Social bonding with an extending view \\  & research. SEM used for data and & collected from four different firms & of involvement has positive effects on \\  & hypothesis testing & in Malaysia & ISPC behavior \\ \hline
[86] & The mixed-method research & & Situational Crime Prevention Theory \\  & methodology was adopted. SEM & 518 correct responses & (SCPT) and Social Bond Theory (SBT) \\  & used for model and data testing & were collected & components significantly affect insiders’ \\  & & were collected & (employee) attitude towards \\  & & misbehavior except for attachment and \\  & & reducing provocations \\ \hline
[87] & Quantitative research menology & 253 responses collected from & PO fit has positive effects on employees’ \\  & adopted. PLS used for & organizations in China & extrarole security behavior and adverse \\  & result analysis & & effects on apathy \\ \hline
[88] & Quantitative study design & 122 females and 124 males & Rules-oriented ethical climate and \\  & & participated & susceptibility weaken the effect of \\  & & regulatory factors towards ISPC \\ \hline
[3] & Mixed method research design & 254 Malaysian employees & Good organizational governance can \\  & & enhance employees’ social bonding, \\  & & which later improves ISPC \\ \hline \hline \end{tabular}
\end{table} 
Table 9: Studies on social behaviors and compliance.