Promoting Peaceful and Inclusive Information Security Compliance: A Systematic Review of Assurance Behavior in IT Employees within the Context of SDG-16 in Malaysia

Abstract

This systematic review examines the alignment between IT employees' desire,
intention, and compliance with information security protocols, a critical issue in Malaysia where
human error is a leading cause of data breaches. Situated within the context of Sustainable
Development Goal 16 (SDG-16), the study analyzes 30 peer-reviewed articles to identify key
behavioral factors. Findings indicate that while training improves knowledge, its impact on longterm behavior is limited. A significant compliance gap is driven by psychological factors like
work overload and optimism bias, as well as organizational elements such as culture and
management support. The review concludes that effective information security assurance
requires a holistic strategy integrating tailored, ethical training with strong organizational support
to mitigate psychological strain and foster a robust security culture. This approach is essential
not only for strengthening cybersecurity but also for supporting Malaysia's commitment to digital
resilience and the principles of SDG-16.