## 2 Theoretical Model and Hypotheses
### The Moderating Effect of Information Security Climate  
The workplace climate can provide researchers the potential level of information security within an organization, and this possible level directly affects employees' behaviors and intentions. The workplace environment is characterized by the working methods and procedures that organize employees' consensus and perceptions that they can identify and follow [12]. [PERSON] et al. [39] stated that the organizational climate is a perception of social construction. Employees can share all aspects of the organizational environment; that is to say, the perceptions of certain aspects of role behavior are supported in the organization. An information security climate (ISC) is the security conceptions of an organization's employees that enhance their workplace security practices to avoid information security problems [22]. ISC can influence an individual's perceptions within an organization and help employees build an information security environment through a common consensus among groups. The organizational climate can also affect employees through cultivating internal marketing. ISM can reduce an unsafe organizational climate, enhance work attitudes, and increase information security intention. A firm can achieve more effective marketing management with a robust information security climate that catches employees' attention and affects their thoughts and behaviors.  
In the security climate model [39], ISC is an antecedent of individuals' motivations for and notions of security and their ISI regarding security compliance. Accordingly, a fundamental assumption of ISC research is the relationship between ISA and ISI. [PERSON] et al. [22]evaluated 140 employees from two intensive information technology organizations in Singapore and found that the information security climate helped improve employees' information security behaviors and strengthened ISI and participation. [PERSON] et al. [39] surveyed 200 information technology users in Korea and found that a strong ISC was an adequate alternative to improve employees' ISI and that ISC helped establish employees' affective and normative commitments, which positively affected their compliance with ISI. These findings led to the following hypotheses:  
**Hypothesis 6.**_ISC positively moderates the relationship between RSC and ISI in the container shipping industry; the negative relationship is weaker when ISC is perceived to be higher than lower._  
**Hypothesis 7.**_ISC positively moderates the relationship between ISM and ISI in the container shipping industry; the positive relationship is stronger when ISC is perceived to be higher than lower._  
Taken together, these advanced relationships suggest that ISA and ISC moderate the mediating effects of RSC on the relationship between ISM and ISI. Another critical issue in this study was determining how ISI was affected by the moderators ISA and ISC. A moderated mediation model, therefore, was suitable for determining the effects of ISI efforts in the container shipping industry to acquire a high ISI, which led to the following hypothesis:  
**Hypothesis 8.**_There is a moderated mediation model for ISI in the container shipping industry wherein ISA and ISC moderate the mediating effect of RSC between IMC and ISI._  
In sum, by promoting the notions of information security marketing and information security intention from the vantage point of response cost, this study proposed an integrative and moderated mediation model for seven hypotheses (see Figure 1). The model's transaction value for container shipping firms is expected to extend their information security management in considering response cost as a mediator, with enhanced security awareness and information security climate as the two moderators.