Exploring Strategies for Enforcing Cybersecurity Policies

Security has become a significant issue globally, and companies over the world are trying to manage their security challenges and mitigate their security risks. The enforcement of cybersecurity policies is vital in securing the information systems of an organization. Some cybersecurity leaders have not enforced cybersecurity policies in their organizations. The lack of cybersecurity policy compliance is a significant threat to organizations because it leads to security risks and breaches. Grounded in the theory of planned behavior, the purpose of this qualitative multiple case study was to explore strategies used by cybersecurity leaders to enforce cybersecurity policies in organizations. The cybersecurity leaders included cybersecurity leaders and chief information security officers. The study population of the study was cybersecurity leaders associated with the enforcement of cybersecurity policies in some large organizations located in the southwest and northcentral Nigeria. The implication for positive social change lies in the potential to improve the confidentiality of data, reduce the occurrence of breaches, and enhance the integrity of data, and availability of service.