Unlocking the Mediating and Moderating Role of Information Security in Information Systems: A Combined TAM, ISM, and HBM Model

Purpose This study examines the mediating and moderating roles of information security in information systems, focusing on the integration of the Technology Acceptance Model (TAM), Interpretive Structural Model (ISM), and the Health Belief Model (HBM). It investigates how technical, administrative, and human‐centric measures influence organizational information security performance. Design/Methodology/Approach The research adopts a theoretical and empirical approach to analyze the impact of systems quality, security policies, and training on performance outcomes. The sample size comprised 301 individuals, satisfying the minimum need for structural equation modeling and augmenting the statistical power of the study conducted using R 4.4.2 version software. This modeling is employed to test the hypothesized relationship and explore mediating and moderating effects. Findings The results highlight that information security training significantly enhances awareness, which mediates improvements in performance systems quality is a key determinant of resilience, while management systems and polices show limited direct effects unless integrated with other factors. Strict policies, combined with high systems quality, can hinder performance because of inefficiencies. Practical Implications Organizations might balance robust systems, strategic training, and adaptable polices to cultivate a resilient security culture. The findings provide actionable insights for mitigating threats and optimizing resources. Originality/value This study offers a comprehensive framework for aligning technical and human‐centric strategies, contributing to a deeper understanding of holistic information security management.