Employee perspectives on safeguarding information: An exploratory study in a multinational energy corporation
- 1Human Resources Management Department, College of Business, King Khalid University, Abha, Saudi Arabia
Abstract
Information security has become a critical organizational and HR priority in an era of escalating cyber threats. Despite extensive technological investments in cybersecurity infrastructure, the human dimension of information safeguarding remains underexplored, creating significant vulnerabilities in organizational defense mechanisms. This exploratory research investigates employees’ reactions, thoughts, and experiences regarding information safeguarding practices within a large multinational energy corporation in Saudi Arabia. Grounded in Protection Motivation Theory (PMT), this study examines how employees perceive threats to organizational information assets and their behavioral responses to safeguarding imperatives. The research employs a unique dual-method qualitative approach, analyzing 87 firsthand computerized employee comments — one comment contributed by each of 87 distinct employees — extracted from an internal electronic system and conducting 24 semi-structured interviews with full-time employees across various organizational levels. Through systematic thematic analysis, the study identifies five major themes: perceived vulnerability and threat awareness, individual responsibility and accountability, organizational security culture, technical versus human factors in information protection, and knowledge gaps and training. Findings reveal a persistent paradox: heightened threat awareness does not automatically translate into consistent protective behaviors, a pattern moderated by organizational culture, variations in self-efficacy, and response-cost barriers. The study extends PMT to an underexplored context of critical infrastructure. It offers actionable insights for practitioners seeking to cultivate security cultures, address self-efficacy gaps, and design human-centered security interventions in high-stakes organizational environments.
Related
- The SynMuvA lin-15A licenses natural transdifferentiation by antagonizing identity safeguarding mechanisms
- Safeguarding functionality of ATMPs: in-depth characterization of cryopreserved GMP-compliant nTreg products for therapeutic use
- AD-REAL: A Prospective, Multinational, Observational Cohort Study of Clinical Effectiveness and Treatment Discontinuation of Oral Systemics for Moderate-to-Severe Atopic Dermatitis
- The clinical picture of ICANS after CAR-T cell therapy in critically ill patients: A retrospective clustering analysis of a multicentre multinational cohort study
- Knowledge and attitudes toward antimicrobial use, resistance, and stewardship among final-year veterinary students: a multinational cross-sectional survey.
BibTeX
@article{mohiya2026employee,
title = {{Employee perspectives on safeguarding information: An exploratory study in a multinational energy corporation}},
author = {Mohamed Mohiya},
journal = {PLOS One},
year = {2026},
month = oct,
doi = {10.1371/journal.pone.0349656},
url = {https://doi.org/10.1371/journal.pone.0349656},
note = {CC BY 4.0},
}
RIS
TY - JOUR
TI - Employee perspectives on safeguarding information: An exploratory study in a multinational energy corporation
AU - Mohamed Mohiya
PY - 2026
DA - 2026/10/07
JO - PLOS One
DO - 10.1371/journal.pone.0349656
UR - https://doi.org/10.1371/journal.pone.0349656
AB - Information security has become a critical organizational and HR priority in an era of escalating cyber threats. Despite extensive technological investments in cybersecurity infrastructure, the human dimension of information safeguarding remains underexplored, creating significant vulnerabilities in organizational defense mechanisms. This exploratory research investigates employees’ reactions, thoughts, and experiences regarding information safeguarding practices within a large multinational energy corporation in Saudi Arabia. Grounded in Protection Motivation Theory (PMT), this study examines how employees perceive threats to organizational information assets and their behavioral responses to safeguarding imperatives. The research employs a unique dual-method qualitative approach, analyzing 87 firsthand computerized employee comments — one comment contributed by each of 87 distinct employees — extracted from an internal electronic system and conducting 24 semi-structured interviews with full-time employees across various organizational levels. Through systematic thematic analysis, the study identifies five major themes: perceived vulnerability and threat awareness, individual responsibility and accountability, organizational security culture, technical versus human factors in information protection, and knowledge gaps and training. Findings reveal a persistent paradox: heightened threat awareness does not automatically translate into consistent protective behaviors, a pattern moderated by organizational culture, variations in self-efficacy, and response-cost barriers. The study extends PMT to an underexplored context of critical infrastructure. It offers actionable insights for practitioners seeking to cultivate security cultures, address self-efficacy gaps, and design human-centered security interventions in high-stakes organizational environments.
SN - 1932-6203
ER -