Purpose: This paper aims to examine the individual and combined effects of organisational and behavioural factors on employees’ attitudes and intentions to establish an information security policy compliance culture (ISPCC) in organisations. Design/methodology/approach: Based on factors derived from the organisational culture theory, social bond theory and accountability theory, a testable research model was developed and evaluated in an online survey that involves the use of a questionnaire to collect quantitative data from 313 employees, from ten different organisations in Ghana. The data collected were analysed using the partial least squares-structural equation modelling approach, involving the measurement and structural model tests. Findings: The study reveals that the individual measures of accountability – identifiability (2.4%), expectations of evaluation (38.8%), awareness of monitoring (55.7%) and social presence (−41.2%) – had weak to moderate effects on employees’ attitudes towards information security policy compliance. However, the combined effect showed a significant influence. In addition, organisational factors – supportive organisational culture (15%), security compliance leadership (2%) and user involvement (63%) – showed positive effects on employees’ attitudes. Further, employees’ attitudes had a substantial influence (65%), while behavioural intentions demonstrated a weak effect (24%) on the establishment of an ISPCC in the organisation. The combined effect also had a substantial statistical influence on the establishment of an ISPCC in the organisation. Practical implications: Given the findings of the study, information security practitioners should implement organisational and behavioural factors that will have an impact on compliance, in tandem, with the organisational effort to build a culture of compliance for information security policies. Originality/value: The study provides new insights on how to address the problem of non-compliance with regard to the information security policy in organisations through the combined application of organisational and behavioural factors to establish an information security policy compliance culture, which has not been considered in any past research.

This paper investigates the determinants that will influence students’ acceptance of the electronic learning (e-learning) system of education after the COVID-19 emergency. Specifically, the paper assesses the attitudes and intentions of students in second-cycle institutions to accept e-learning after the pandemic, using constructs derived from the health belief model and technology acceptance model. Also, we test if there is any significant difference in the attitudes and intentions of students in public and private institutions. Using data collected from 370 students in upper and lower levels of a second-cycle institutions in Ghana, we found that student attitude is significantly influenced by perceived usefulness and moderately affected by perceived severity, whereas, student’s intention is moderately affected by the perceived severity but substantially influenced by the student’s attitude towards usage. Also, the results revealed that students’ attitudes and intentions to use e-learning are moderately affected by the severity of the ongoing COVID-19 pandemic. Finally, there were no significant differences in the attitudes and intentions of the sampled students in public and private second-cycle institutions in Ghana, regarding their acceptance and usage of e-learning after the COVID-19 emergency. Given the study’s findings, the paper concludes that students’ attitudes and intention to use e-learning are the main determinants that will influence the students’ acceptance of the e-learning system of education in second-cycle institutions in Ghana after the COVID-19 emergency. The paper contributes to knowledge by providing evidence of students’ acceptance of the e-learning system of education after the COVID-19 emergency in the context of a developing country like Ghana.

Information security policy (ISP) noncompliance is a growing problem that accounts for a significant number of security breaches in organizations. Existing strategies for changing employees' behavior intentions towards compliance have not been effective. It is therefore imperative to identify other effective strategies to address the problem. This article investigates the effect accountability constructs on employees' attitudes and behavior intentions towards establishing ISP compliance as a culture. In addition, the authors validate a testable research model for predicting employees' compliance behavior intentions in a field survey involving 313 employees from selected Ghanaian companies. The overall effect showed that measures of accountability significantly influenced employees' attitudes and behavior intentions to ISP compliance while the establishment of ISP compliance culture largely depended on the existence of a conducive information security culture and positive employee behavior intentions.