## 1 Introduction  
With the increasing circulation of complex information bringing more significant benefits to organizations, information security is of utmost concern in business operations. Information systems with premium designs are beneficial for efficient business operations in swiftly changing business environments. Still, they are relatively more vulnerable to information security threats, such as unauthorized use, improper disclosure and use of information, information destruction, and password theft or destruction. Security threats have followed the development pace in information and technology systems, threatening serious irreparable business losses. Worldwide reports have indicated that almost every industry has addressed information security issues in response to a wide range of threats and requirements. Their expected cost will reach a compounded annual growth rate of 9.6% between 2016 and 2021. In 2017, the world's total expenditures for security products and services reached USD83.5 billion, increasing by 10.3% over 2016 [1]. The Global State of Information Security Survey investigated 9500 executives in 122 countries in 2017, the findings of which reported a total loss of approximately USD578 billion in security incidents, a 13% increase from 2016 [2]. While total losses continue to increase, a key solution has still not been found. The container shipping industry is critical to international trade and the global economy [3]. More than 80% of global trade relies on transiting merchandise by sea and land transportation [4]. Once information systems have been attacked, it causes uncalculated losses for the shipping industry and impacts many related industries. In 2017, the information system of the largest container shipping company, the A.P. Moller-Maersk Group, was attacked by ransomware, triggering a significant loss of about USD 200 to 300 million [5]. Moreover, another logistics leader, FedEx, also faced exorbitant losses of USD 300 million in September 2017, after the company was attacked by a ransomware blitz [5]. Maintaining an impregnable information system that protects databases is considered a serious challenge. However, most loopholes in information security result from human error caused by poor user behavior and security cognition [6]. According to an investigation by the International Data Group (IDG) [2], 48% of those surveyed did not have a staff security awareness training scheme, and 54% of the companies did not have an incident information security response mechanism. Information security awareness training for employees via marketing management helps fight various security threats, and proper information security intentions and behaviors are a focus of the shipping industry. The main challenge in dealing with information security is developing and using effective procedures and responsiveness. Marketing is popularly used in organizational management, which is defined as the social and managerial processes used to meet individuals' and organizations' needs by way of creating and exchanging value with others [7]. Marketing can be categorized into external marketing and internal marketing [8]. External marketing is the process by which firms produce value for customers and establish a good relationship with customers by capturing value to keep customers returning [6]. Internal marketing, or treating employees like customers [9], satisfies employees' needs and attitudes, positively affecting managerial outcomes [10; 11]. According to this internal marketing concept, successful information security marketing in organizations promotes employees' knowledge and skills and helps them sustain high-quality information security procedures in the workplace. A workplace climate is a common perception of the work environment, including practices and procedures, that employees identify with [12]. Because other staff members can easily influence employees' behaviors and work attitudes, a positive workplace climate is critical in an organization.