Analysis of the User Acceptance for Implementing ISO/IEC 27001:2005 in Turkish Public Organizations

TL;DR

This paper develops a model to understand user acceptance of ISO/IEC 27001:2005 implementation in Turkish public organizations, highlighting the influence of legislation and key acceptance factors.

Contribution

It introduces a user acceptance model specific to Turkish public organizations implementing ISO 27001, incorporating legislation as a significant factor.

Findings

Legislation significantly affects user acceptance.

Perceived usefulness influences attitude towards use.

Social norms and performance expectancy are key components.

Abstract

This study aims to develop a model for the user acceptance for implementing the information security standard (i.e. ISO 27001) in Turkish public organizations. The results of the surveys performed in Turkey reveal that the legislation on information security public which organizations have to obey is significantly related with the user acceptance during ISO 27001 implementation process. The fundamental components of our user acceptance model are perceived usefulness, attitude towards use, social norms, and performance expectancy.