The research aims to develop a structural model of user knowing -doing gap and examine the information security awareness through the model and evaluate the information security awareness at industrial level.The sample of the study is 360.The study empirically tested the two small parts of the theory of planned behavior and named them model 1 and 2. The relationship of the variables were found out using the regression model.The research had total five hypothesis and all of them were supported and the results were significant.Hence concluding that (Narcissism, Vulnerability and Severity) have significant impact on Attitude while locus of control and self-efficacy have significant impact over Behavioral control.