Comparing Information Security Compliance Between New Zealand, USA, and Vietnam

The number of employees working remotely has grown significantly in recent years, creating new challenges for information security functions within organizations. The increasing threat surface and lack of control over personal employee networks and devices pose a significant risk, especially when it comes to information handling and incident reporting. We built upon prior work on the human aspects of information security and conducted a quantitative study to compare behaviors, attitudes, and knowledge of employees from New Zealand, the USA, and Vietnam. Our findings suggest that although information security best practices are universal, some of them are understood and applied differently across the globe. Our study offers valuable practical and theoretical implications and can serve as a foundation for organizations to revise their security education, awareness, and training (SETA) programs to reflect more accurately the nuanced nature of the diverse workforce of the 21st century.