Shedding a light on the
mediating effect of attitude on the relationship between information security awareness and behavior, they found that attitude is only
a partial mediator. Hence, we hypothesize a direct effect of information security awareness on the Intention to comply with security
policies. Thus,