Effectiveness of using a change management approach to convey the benefits of an information security implementation to technology users

This study addressed the problems associated with users' understanding, accepting, and complying with requirements of security-oriented solutions. The goal of the research was not to dispute existing theory on IT project implementations, but rather to further the knowledge on the topic of technology user acceptance of security-oriented IT implementations also referred to as protective technologies. The research described in this study examined whether historically successful change management tactics can be used by IT departments to enhance the acceptance and compliance with information security policies, procedures, and doctrine. This study was conducted using a quantitative research approach employing survey research methodology. To examine the factors that affect technology users' acceptance and compliance of security-oriented IT solutions a 62-item Web-based survey was developed for data collection. The sample population for this research included teachers and IT professionals from within a school system located in the Southeastern region of the United States. Regression analysis was used to address the effectiveness of using change management tactics to convey the benefits of IT security implementations to technology users. Due to a small number of respondents the study's findings could not answer the research questions or reject the null hypotheses. The findings could not be generalized for the general population. This outcome does not change the need to conduct a follow on study of this nature.