# The Role of Decision-Making Styles in Shaping Cybersecurity Compliance Behavior
## 7 Conclusions  
Despite the high-cost investments made by public and private sector organizations to ensure their cybersecurity, employees' noncompliance with information security policies threatens the organizations' information assets. Employees must comply with the security regulations their institutions have notified them of to ensure cybersecurity. Many models based on different theories have been proposed to explain individuals' cybersecurity compliance behaviors. However, most of these studies focused on external factors rather than internal factors of individuals. This study aimed to observe the impacts of individuals' decision-making styles, one of the internal factors, on the factors that affect the employees' cybersecurity compliance behaviors. The results showed that our model explained individuals' cybersecurity compliance behaviors well and that subgroups differed, based on individuals' decision-making styles. For the general group that included all participants, perceived vulnerability, perceived severity, self-efficacy, response efficacy, and security awareness factors affected employees' cybersecurity compliance behaviors. However, the effects of the perceived barrier factors were not observed. In detail, our findings indicated that security awareness was significant, both for the overall group and for all subgroups of decision-making styles in explaining cybersecurity compliance behaviors. Meanwhile, the effects of perceived vulnerability, perceived severity, response-efficacy, and self-efficacy factors varied for decision-making styles. All authors contributed to the study. Conceptualization, A.D. and H.K. ; data collection, A.D. and M.S.G. ; data analysis, A.D. and H.K. ; writing--original draft, A.D. and H.K. ; writing--review and editing, M.S.G. All authors have read and agreed to the published version of the manuscript. This research received no external funding. The study was conducted in accordance with the Declaration of Helsinki and approved by the Academic Human Research Ethics Committee of Gebze Technical University in Turkey, with protocol code #12-01, on 17 August 2022. Informed Consent Statement: Informed consent was obtained from all subjects involved in the study. The data in this study can be provided upon request by sending an e-mail to the corresponding author. The authors declare no conflict of interest. The final data analysis  
Perceived Severity (adapted from [PERSON] et al., 2019 [13]; [PERSON], 2012 [39]; [PERSON] and [PERSON], 2012 [45]; [PERSON] et al., 2009 [47]; [PERSON] et al., 2005 [38]) PS1--Having mycomputer infected by a virus as a result of opening a suspicious email attachment is a serious problem for me. PS2--At work, having my confidential information accessed by someone without my consent or knowledge is a serious problem for me. PS3--Loss of data resulting from hacking is a serious problem for me. PS4--Having my online identity stolen through social networking sites would be a serious problem for me. * Perceived Vulnerability (adapted from [PERSON] et al., 2019 [13]; [PERSON], 2012 [39]; [PERSON] et al., 2005 [38]) PV1--I feel that my organization could become vulnerable to security breaches if I do not adhere to its information security policy. PV2--I feel that I could fall victim to a malicious attack if I fail to comply with my organization's information security policy. PV3--I believe that my effort to protect my organization's information will reduce illegal access to it. PV4--My organization's data and resources may be compromised if I do not pay adequate attention to information security policies and guidelines. * Self-Efficacy (adapted from [PERSON] and [PERSON], 2020 [25]; [PERSON] et al., 2019 [13]; [PERSON] et al., 2017 [46]; [PERSON] et al., 2009 [50]) SEEF1--I feel confident setting the web browser to different security levels. SEEF2--I feel confident using different programs to protect my information and information system. SEEF3--I feel confident handling virus-infected files and/or getting rid of malware/spyware.