Abstract
The rapid shift toward remote work environments within healthcare organizations has heightened cybersecurity vulnerabilities, making individual security compliance critical for safeguarding sensitive patient data. This study quantifies the socio-technical factors influencing cybersecurity compliance among remote healthcare workers using an Extended Theory of Planned Behavior (TPB) framework. Incorporating organizational security climate, perceived work stress, and technical system usability alongside classic TPB constructs (attitude, subjective norm, and perceived behavioral control), a structural equation modeling (SEM) approach was applied to survey data collected from 412 remote clinical and administrative healthcare personnel across North America and Europe. The empirical findings reveal that while attitude and perceived behavioral control strongly predict compliance intention (β = 0.34, p < 0.001 and β = 0.28, p < 0.001, respectively), organizational security climate exerts significant direct and indirect positive effects on compliance behavior. Conversely, high perceived work stress and poor usability of security controls significantly attenuate compliance practices (β = -0.19, p < 0.01). The integrated socio-technical model accounts for 62.1% of the variance in cybersecurity compliance behaviors. These results highlight the necessity of designing user-centric security protocols and fostering a supportive security culture rather than relying solely on mandatory policy enforcement in distributed healthcare settings.
