Our study is, to our best knowledge, the first to investigate the role of information security policy on shaping an employee’s attitude and compliance-related outcome beliefs. Our findings show that information security policy exerts a significantly positive influence on outcome beliefs, which influence the employee’s beliefs about the benefit of compliance and the cost of noncompliance, while information security policy exerts a significantly negative influence on the outcome belief that leads to perceptions of the cost of compliance.