Exploring the Relation between Information Security Policy Compliance and Cyber Resilience

Abigail  de Rijp; Tim Huygh; Clara Maathuis; Rogier van de Wetering; Harald Vranken

doi:10.18690/um.fov.4.2026.11

Exploring the Relation between Information Security Policy Compliance and Cyber Resilience

Research output: Chapter in Book/Report/Conference proceeding › Conference Article in proceeding › Academic › peer-review

Abstract

Contemporary digital environments necessitate an increased
organizational commitment to safeguarding the confidentiality,
integrity and availability of information assets. An indispensable
element of this endeavor lies in issuing and enforcing
Information Security Policies (ISP) that delineate appropriate
handling and use of the organization’s information assets. While
prior research predominantly examined the impact of ISPs on
employee cyber behavior, limited attention was given to the
organizational-level effects of ISP compliance (ISPC). In
particular, the extent to which ISPC and cyber resilience (CR) are
interrelated is still insufficiently understood. In light thereof, this
article explores mechanisms that can be implemented to increase
ISPC, the general organizational-level effects of ISPC, and how
ISPC relates to CR specifically. Drawing on an integrative
literature review and a holistic case study, this article explores the
role of ISPC in driving organizational CR

Original language	English
Title of host publication	39th Bled eConference
Subtitle of host publication	Co-Creating Human-Centred and Responsible Digital Futures; Conference Proceedings
Pages	178-192
Number of pages	15
DOIs	https://doi.org/10.18690/um.fov.4.2026.11
Publication status	Published - 2026
Event	39th Bled eConference: CO-CREATING HUMAN-CENTRED AND RESPONSIBLE DIGITAL FUTURES - Bled, Slovenia Duration: 7 Jun 2026 → 10 Jun 2026 Conference number: 39 https://bledconference.org/

Conference

Conference	39th Bled eConference
Country/Territory	Slovenia
City	Bled
Period	7/06/26 → 10/06/26
Internet address	https://bledconference.org/

Access to Document

10.18690/um.fov.4.2026.11Licence: CC BY

Cite this

@inproceedings{d1b71e329b374dd480fccc2973d34e97,

title = "Exploring the Relation between Information Security Policy Compliance and Cyber Resilience",

abstract = "Contemporary digital environments necessitate an increased organizational commitment to safeguarding the confidentiality, integrity and availability of information assets. An indispensable element of this endeavor lies in issuing and enforcing Information Security Policies (ISP) that delineate appropriate handling and use of the organization{\textquoteright}s information assets. While prior research predominantly examined the impact of ISPs on employee cyber behavior, limited attention was given to the organizational-level effects of ISP compliance (ISPC). In particular, the extent to which ISPC and cyber resilience (CR) are interrelated is still insufficiently understood. In light thereof, this article explores mechanisms that can be implemented to increase ISPC, the general organizational-level effects of ISPC, and how ISPC relates to CR specifically. Drawing on an integrative literature review and a holistic case study, this article explores the role of ISPC in driving organizational CR",

author = "\{de Rijp\}, Abigail and Tim Huygh and Clara Maathuis and \{van de Wetering\}, Rogier and Harald Vranken",

year = "2026",

doi = "10.18690/um.fov.4.2026.11",

language = "English",

pages = "178--192",

booktitle = "39th Bled eConference",

note = "39th Bled eConference : CO-CREATING HUMAN-CENTRED AND RESPONSIBLE DIGITAL FUTURES ; Conference date: 07-06-2026 Through 10-06-2026",

url = "https://bledconference.org/",

}

de Rijp, A, Huygh, T , Maathuis, C , van de Wetering, R & Vranken, H 2026, Exploring the Relation between Information Security Policy Compliance and Cyber Resilience. in 39th Bled eConference: Co-Creating Human-Centred and Responsible Digital Futures; Conference Proceedings. pp. 178-192, 39th Bled eConference, Bled, Slovenia, 7/06/26. https://doi.org/10.18690/um.fov.4.2026.11

Exploring the Relation between Information Security Policy Compliance and Cyber Resilience. / de Rijp, Abigail ; Huygh, Tim ; Maathuis, Clara et al.
39th Bled eConference: Co-Creating Human-Centred and Responsible Digital Futures; Conference Proceedings. 2026. p. 178-192.

Research output: Chapter in Book/Report/Conference proceeding › Conference Article in proceeding › Academic › peer-review

TY - GEN

T1 - Exploring the Relation between Information Security Policy Compliance and Cyber Resilience

AU - de Rijp, Abigail

AU - Huygh, Tim

AU - Maathuis, Clara

AU - van de Wetering, Rogier

AU - Vranken, Harald

N1 - Conference code: 39

PY - 2026

Y1 - 2026

N2 - Contemporary digital environments necessitate an increased organizational commitment to safeguarding the confidentiality, integrity and availability of information assets. An indispensable element of this endeavor lies in issuing and enforcing Information Security Policies (ISP) that delineate appropriate handling and use of the organization’s information assets. While prior research predominantly examined the impact of ISPs on employee cyber behavior, limited attention was given to the organizational-level effects of ISP compliance (ISPC). In particular, the extent to which ISPC and cyber resilience (CR) are interrelated is still insufficiently understood. In light thereof, this article explores mechanisms that can be implemented to increase ISPC, the general organizational-level effects of ISPC, and how ISPC relates to CR specifically. Drawing on an integrative literature review and a holistic case study, this article explores the role of ISPC in driving organizational CR

AB - Contemporary digital environments necessitate an increased organizational commitment to safeguarding the confidentiality, integrity and availability of information assets. An indispensable element of this endeavor lies in issuing and enforcing Information Security Policies (ISP) that delineate appropriate handling and use of the organization’s information assets. While prior research predominantly examined the impact of ISPs on employee cyber behavior, limited attention was given to the organizational-level effects of ISP compliance (ISPC). In particular, the extent to which ISPC and cyber resilience (CR) are interrelated is still insufficiently understood. In light thereof, this article explores mechanisms that can be implemented to increase ISPC, the general organizational-level effects of ISPC, and how ISPC relates to CR specifically. Drawing on an integrative literature review and a holistic case study, this article explores the role of ISPC in driving organizational CR

U2 - 10.18690/um.fov.4.2026.11

DO - 10.18690/um.fov.4.2026.11

M3 - Conference Article in proceeding

SP - 178

EP - 192

BT - 39th Bled eConference

T2 - 39th Bled eConference

Y2 - 7 June 2026 through 10 June 2026

ER -

Exploring the Relation between Information Security Policy Compliance and Cyber Resilience

Abstract

Conference

Access to Document

Fingerprint

Cite this